last executing test programs: 2m30.509287657s ago: executing program 1 (id=410): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xf721, 0x80, 0x4, 0x222}, &(0x7f00000005c0)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xd1b5, 0x3, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 2m30.431967068s ago: executing program 0 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x80}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x2000c0c1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2m30.067350085s ago: executing program 1 (id=415): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_on}]}) 2m29.952542218s ago: executing program 0 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 2m29.668394373s ago: executing program 1 (id=419): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000003c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 2m29.667609293s ago: executing program 0 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000580)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 2m29.368765839s ago: executing program 1 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='\t\x00\x00\x00 \x00\x00\x00\n\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) 2m29.367965329s ago: executing program 0 (id=432): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xcc0, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) 2m28.849297339s ago: executing program 0 (id=434): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m28.83931016s ago: executing program 1 (id=424): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8917, &(0x7f0000000100)) socket$kcm(0x2, 0x0, 0x84) 2m27.958480086s ago: executing program 1 (id=443): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2008010, &(0x7f0000000240)={[{@rootdir={'rootdir', 0x3d, 0x6}}, {@anchor={'anchor', 0x3d, 0x7f}}, {@uid_forget}, {@anchor={'anchor', 0x3d, 0x3}}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@noadinicb}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") sync() mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2m27.75338102s ago: executing program 0 (id=433): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2m12.90071485s ago: executing program 32 (id=443): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2008010, &(0x7f0000000240)={[{@rootdir={'rootdir', 0x3d, 0x6}}, {@anchor={'anchor', 0x3d, 0x7f}}, {@uid_forget}, {@anchor={'anchor', 0x3d, 0x3}}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@noadinicb}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") sync() mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2m12.458695939s ago: executing program 33 (id=433): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1m44.097344051s ago: executing program 6 (id=804): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 1m41.437257423s ago: executing program 6 (id=822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800034000000000080001400000000005000200000000000800064000000004080004400000000008000540000019000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 1m41.248788557s ago: executing program 6 (id=824): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="06000000914fc94c0c79aaf5598e4fbcafb2126be3608491297e00c7b4023418", 0x20) 1m41.08233547s ago: executing program 6 (id=826): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@size={'size', 0x3d, [0x32]}}]}) 1m40.763895466s ago: executing program 6 (id=830): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x0, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m40.253668976s ago: executing program 6 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff0000000006000000180100002000752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m39.798138505s ago: executing program 34 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff0000000006000000180100002000752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.803773116s ago: executing program 5 (id=1730): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.696799588s ago: executing program 5 (id=1734): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 2.269188195s ago: executing program 3 (id=1760): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x106c0e0, &(0x7f00000006c0)={[{'inode64'}]}) 2.218564306s ago: executing program 4 (id=1761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 2.218030367s ago: executing program 3 (id=1772): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001002dbd7000000000000a00800044"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.162897558s ago: executing program 4 (id=1762): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="dbc9", 0x2}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="af0e73", 0x3}], 0x1) 2.109488729s ago: executing program 3 (id=1763): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000d00)) 2.108203849s ago: executing program 4 (id=1764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000100000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000000008000700263a090914000600626f6e64300000000000000080000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x40}, 0x4008) 2.04296396s ago: executing program 4 (id=1765): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.008215521s ago: executing program 3 (id=1767): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) 1.977511631s ago: executing program 3 (id=1768): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0xa, 0xc, "6ea308c874816f592d55694b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.613510598s ago: executing program 5 (id=1769): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10086) 1.209438636s ago: executing program 5 (id=1774): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) 1.206666916s ago: executing program 2 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 1.075716409s ago: executing program 4 (id=1777): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4437, &(0x7f0000004480)="$eJzs3b9PHFceAPA3Az6Dz/aBz4VPOulWOkt3ujshcHV3WDrA2BhszpETW1Ga9QJrm2RhLViiFC5IZylVpBRRCiuR0lFZFGmdPyFNqsipLcVFmkiRrBDt7iwww67YYBZi5/MpmJ33G74zb98Uw4sTlbvzy7n55VxhMVeevb18LvduubSyUAzxAWna/5GD65/2dOI6Oexr77fs2oVLr988F8KXc18/3djY2AhV3aGpoW2ff/j+/uz2Y0OcqVNtt3lr++WtEMLpHeOq6gohvPlFCFEIYTRJG0uOvSGEE6Ged/P+B7dyLzSGbzY/PXpSPJ9/Pv1gffjs1NrD9da/exTCJ6U//evOwnd/7Rr+9h8v1D0AAAAAAAAAAAAAAAAAAK+MievXbrw2OBQeR6F7Ldr5vu5Ecmz1fuzGvvlL539ZAAAAAAAAAAAAAAAAAAAA+JXaev8/F51q8v7/eHIcaVF/43+dHyOdM/n/a+MXB4eS/d+jHfn/TpKejYbQ32Tf9+z+76OZ+s33f9/Zz141xtfoty9E8UDqPI4HBkL4LNn4/Ux0LC6Vlyv/vF1eWZzbt2G8tNLxr+/en4pOsqH/s9GutuI/lmm/8/v//3HH1VQ9v7V/l9grLR3/rpblPn8/aiv+FzL1DiL+7F06/t21tN7tBUbqE0A1/h927x7/8Uz7nYr/yRBCLqqONZeaAaprmGp6q/UKaen4H6mlpabO5A/Z6v7/MRP/i5n2D2v+X81+EdFUOv6/q6X1pEps3f/98e73/6VM+4cR/+r4V33/tyUd/6P1xO5Ukdpfst35fyLTfqfifyNOxnkySl0Ba1E9vdX/qyMtHf+eHflbz39xW+u/y5n6B/X81+i38fzXmP7/HtWf/2guHf/eluXavf8nM/U6Pf+P1NZ/7FU6/sdqaem1c1/tZ1vxPxrCVKb9TsW/tirpacR/az756Wg9/VPrv7ak4//7emK8vcRq7Wdt/Rftvv6/kmn/MNZ/1fGvxp3t9VWRjv/xluWq8f+qje//q5l6nY9/CIPW+nuWjv+JluVq93/P7vGfztTrdPz/1snGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4CY8mxL0TxQOo8jgcGQriQnJ8Jx6KZwlx+plSefWc5hPEkPRdORXdK5ZlCKT+/WJ4r5gulUnk2hItJ/unQEy2XypX8QuHepc22eqO7xcJSZaZYqIQQJpL0P4cTjbZm5isLhXshhMubeX+Iy0v37hYW83PzS/8dHBwcDJObY+iPiu9ViouVeu/13BCmNuv2RdsGV8u+sjmW49Hb5ZWlxUKpln51W51SebZQ2lZnOsn7KPRHlaWVxdlCpZgvle80+jtMI8lxfPL6G9evDu3IvxXVj2MHOywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfqHHw//5OITQXT+LQwgjjQ9Rs/KPnhTP559PP1gfPju19nD9aatyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVdOkZpIIjCAPxmLNTOY1gtu53tiiJauCJ4Aj2Gh9GjeAnvkCJF2hQhkMxC2OzCNkn1fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDP03v38VY3ESmuNpcRf1//i8P8pdSf+/H7F2eYkdN5fu0eHuum/Hs6yu/K0bLNu3S9+v6Mkdr7HezJcJ/2+j7Xk3NN7dvUfH3fm0i5ioi25Lcp56qa9xYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA//8Oph/w") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80106f05, 0x0) 1.074738509s ago: executing program 5 (id=1778): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000044, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2b2, &(0x7f0000000c00)="$eJzs3UFrY1UUAODzkkyacRYp4kYRfKALV6V166ZRRhC7UiKoCw3ODEgSBmYgYAXjrPoLXPo//Alu3PgPBLeCu3ZRvfLy3mtSm7S1pnWg37c6vfeee0/eLckqJ1+8Oh4+eJzFs8Nfo9PJorEbu3GUxWY0ovZdtGKpe8uHAYDn21FK8Ue6Smarsf5qAICbUH7+l/5V4t1rKwkAuGYfffLpB729vfsf5nknXu4eTPpZRIwPJv1yvvcovopRPIzt6MZxRDpRxu+9v3c/WnlhM94YTyf9InP8+c/V/r3fI2b5O9GNzeX5O3npJP+Furo8eo/u1H9046Xl+W/9Mz/G0+i3483XF+rfim788mU8jlE8iCJ3nv/tTp6/m74//Oaz4pgiP2tEf2O2bi41b+hKAAAAAAAAAAAAAAAAAAAAAAC4BbbyPCvb98z69xRDs/45k37zeDa/ldcW+/tM6/5AWb3RdvyVUqSoWvRMU/xQ99fZzvM8VQvn+a14pbXqhwUAAAAAAAAAAAAAAAAAAADgdnn69f5wMBo9fLKWoO4GUH+t/6r77C6MvBb7w0Fz9YYblz9rsdtAUeu5i6PVijU9louCu0U9a995Y365H0cZ1Bez1rNefKfcdH84yKup+iEPB9lFZ3Xqi/txcaod/7WwNPuXOE6n77RzUurprPaankb73tKpP1NKl9vn7d/KO6pGslmLjcudfqcKlr7AIuicvYufVm+48i2juZY3HgAAAAAAAAAAAAAAAAAA4Iz5l36XTD47N7VxbUUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA2b//5/HXQi4vTImWBaJZ+3pgra8eTp//wSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAX+DgAA//+Mi1BQ") r1 = open(&(0x7f0000000080)='./file0\x00', 0x840, 0x0) sendfile(r0, r1, 0x0, 0x0) 1.00551651s ago: executing program 2 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010014000008000100ac14140008000400", @ANYRES32=r1, @ANYBLOB="100016800c00038000000100", @ANYRES32, @ANYBLOB="060015000400000008000500e0000001"], 0x4c}}, 0x0) 937.776292ms ago: executing program 5 (id=1781): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) 827.515504ms ago: executing program 2 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) 827.038344ms ago: executing program 7 (id=1783): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x47, &(0x7f0000001640)=""/71}) 713.949516ms ago: executing program 7 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0xa4eb}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44042}, 0xc000) 696.949686ms ago: executing program 2 (id=1785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810000000000000000001100000024000980080001"], 0x38}}, 0x0) 566.413799ms ago: executing program 7 (id=1786): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd2d, 0x25dfdbfb, {0xa, 0x80, 0x14, 0x4, 0x14, 0x0, 0x0, 0x2, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c095}, 0x1c070) 465.46092ms ago: executing program 7 (id=1787): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 465.330401ms ago: executing program 2 (id=1788): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000480)={[{}, {@usrjquota_file, 0x4}, {@noattrs}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 426.336772ms ago: executing program 4 (id=1789): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0xa, &(0x7f0000000000)) 350.264073ms ago: executing program 7 (id=1790): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee00}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@errors_continue}, {@gid}, {@umask={'umask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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") r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000003fc0)=""/4133, 0x1025) 176.119636ms ago: executing program 7 (id=1791): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000380)=""/78, 0x4e, 0x10000) 89.504138ms ago: executing program 3 (id=1792): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000440)={[{@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x515, &(0x7f0000000e40)="$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") r0 = open(&(0x7f0000000080)='./file2\x00', 0x109042, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0xfdef}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=1793): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_ep_write(r0, 0x8d, 0x3, &(0x7f0000000340)="d0be16") kernel console output (not intermixed with test programs): oop3: detected capacity change from 0 to 128 [ 171.489735][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.490364][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.513992][ T6781] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.527957][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.539958][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.578494][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.586190][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.696795][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.715679][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.761352][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.770424][ T6972] loop4: detected capacity change from 0 to 32768 [ 171.888633][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.896285][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.903160][ T6972] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 171.906518][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.926006][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.926605][ T6972] XFS (loop4): Mounting V5 Filesystem [ 171.966606][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.997293][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.072669][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.083845][ T6972] XFS (loop4): Ending clean mount [ 172.099722][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.110860][ T6972] XFS (loop4): Quotacheck needed: Please wait. [ 172.154440][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.185306][ T6972] XFS (loop4): Quotacheck: Done. [ 172.185449][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.274028][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.291115][ T7016] netlink: 'syz.5.942': attribute type 4 has an invalid length. [ 172.307928][ T7016] netlink: 17 bytes leftover after parsing attributes in process `syz.5.942'. [ 172.338549][ T6781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.387908][ T4268] XFS (loop4): Unmounting Filesystem [ 172.391832][ T6781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.473330][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.522628][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.746222][ T7003] loop2: detected capacity change from 0 to 32768 [ 172.790397][ T7003] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.940 (7003) [ 172.860815][ T7003] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 172.910710][ T7003] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 172.950635][ T7003] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 172.996824][ T7028] loop5: detected capacity change from 0 to 4096 [ 173.003355][ T7003] BTRFS info (device loop2): use lzo compression, level 0 [ 173.003386][ T7003] BTRFS info (device loop2): using free space tree [ 173.124219][ T7028] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 173.386414][ T7003] BTRFS info (device loop2): enabling ssd optimizations [ 173.406479][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.417896][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.446731][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.732279][ T7003] BTRFS warning (device loop2): failed to trim 1 device(s), last error -512 [ 173.792032][ T5958] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 173.855193][ T4267] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 174.640848][ T4412] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.708712][ T7075] loop5: detected capacity change from 0 to 4096 [ 174.749850][ T7075] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 174.842525][ T4412] usb 4-1: config 0 has an invalid interface number: 73 but max is 0 [ 174.880312][ T4412] usb 4-1: config 0 has no interface number 0 [ 174.929176][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.931240][ T4412] usb 4-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 174.962562][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.008361][ T4412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.038828][ T4412] usb 4-1: Product: syz [ 175.053809][ T4412] usb 4-1: Manufacturer: syz [ 175.071002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.079290][ T4412] usb 4-1: SerialNumber: syz [ 175.085133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.112736][ T6781] device veth0_vlan entered promiscuous mode [ 175.123443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.135778][ T4412] usb 4-1: config 0 descriptor?? [ 175.153314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.196838][ T6781] device veth1_vlan entered promiscuous mode [ 175.304966][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.321977][ T7075] ntfs3: Cannot use different iocharset when remounting! [ 175.322021][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.401081][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.414100][ T4412] usb 4-1: USB disconnect, device number 11 [ 175.453465][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.489653][ T6781] device veth0_macvtap entered promiscuous mode [ 175.531318][ T6781] device veth1_macvtap entered promiscuous mode [ 175.611962][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.636366][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.670576][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.717157][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.746540][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.776637][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.798406][ T7100] IPVS: ip_vs_add_dest(): server weight less than zero [ 175.807958][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.847630][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.879499][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.928299][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.950117][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.990851][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.040823][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.054025][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.066479][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.121046][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.150509][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.178836][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.228730][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.279437][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.312018][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.343843][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.372004][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.428514][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.449352][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.482648][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.490932][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.511090][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.529093][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.548845][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.566841][ T7098] loop2: detected capacity change from 0 to 32768 [ 176.581948][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.602415][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.630793][ T6781] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.649884][ T6781] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.677517][ T6781] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.735926][ T6781] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.025626][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.066417][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.131100][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.151040][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.159622][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.217160][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.445813][ T7132] loop7: detected capacity change from 0 to 256 [ 177.700208][ T7137] vivid-000: disconnect [ 177.744320][ T7136] vivid-000: reconnect [ 177.871255][ T7140] netlink: 408 bytes leftover after parsing attributes in process `syz.7.985'. [ 177.880278][ T7140] netlink: 64 bytes leftover after parsing attributes in process `syz.7.985'. [ 178.147287][ T7152] loop2: detected capacity change from 0 to 128 [ 178.155780][ T7151] loop3: detected capacity change from 0 to 64 [ 178.223469][ T7117] loop5: detected capacity change from 0 to 40427 [ 178.285485][ T7117] F2FS-fs (loop5): invalid crc value [ 178.333469][ T7117] F2FS-fs (loop5): Found nat_bits in checkpoint [ 178.490010][ T7117] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 178.547461][ T7162] loop2: detected capacity change from 0 to 128 [ 178.611649][ T7162] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 179.060627][ T4503] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 179.271649][ T4503] usb 8-1: Using ep0 maxpacket: 8 [ 179.284973][ T4503] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 179.325968][ T4503] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 179.353086][ T4503] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.371546][ T4503] usb 8-1: Product: syz [ 179.375810][ T4503] usb 8-1: Manufacturer: syz [ 179.400568][ T4503] usb 8-1: SerialNumber: syz [ 179.421378][ T4503] usb 8-1: config 0 descriptor?? [ 179.432319][ T7184] loop2: detected capacity change from 0 to 4096 [ 179.443537][ T4503] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 179.481814][ T4503] usb 8-1: setting power ON [ 179.486379][ T4503] dvb-usb: bulk message failed: -22 (2/0) [ 179.521061][ T4503] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.542377][ T7186] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.557972][ T4503] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 179.597929][ T7187] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1006'. [ 179.617682][ T4503] usb 8-1: media controller created [ 179.648204][ T7168] dvb-usb: bulk message failed: -22 (3/0) [ 179.660625][ T7168] cxusb: i2c wr: len=80 is too big! [ 179.660625][ T7168] [ 179.677812][ T4503] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.763185][ T4503] usb 8-1: selecting invalid altsetting 6 [ 179.769205][ T4503] usb 8-1: digital interface selection failed (-22) [ 179.802363][ T4503] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 179.844589][ T4503] usb 8-1: setting power OFF [ 179.858510][ T4503] dvb-usb: bulk message failed: -22 (2/0) [ 179.880541][ T4503] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 179.889884][ T4503] (NULL device *): no alternate interface [ 179.938750][ T4503] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 180.002587][ T4503] usb 8-1: USB disconnect, device number 2 [ 180.197441][ T7180] loop5: detected capacity change from 0 to 32768 [ 180.247923][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 180.247936][ T26] audit: type=1800 audit(1758301512.380:56): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.999" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 180.291731][ T7180] ERROR: (device loop5): dbAllocAG: unable to allocate blocks [ 180.291731][ T7180] [ 180.341991][ T7180] ERROR: (device loop5): dbDiscardAG: -EIO [ 180.341991][ T7180] [ 180.687751][ T7208] loop2: detected capacity change from 0 to 16 [ 180.741048][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 180.741063][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 180.741093][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 180.747098][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 180.839231][ T7208] erofs: (device loop2): mounted with root inode @ nid 36. [ 181.477300][ T951] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 181.530167][ T7200] loop7: detected capacity change from 0 to 32768 [ 181.546489][ T7207] loop5: detected capacity change from 0 to 32768 [ 181.665935][ T7207] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 181.685821][ T7203] loop3: detected capacity change from 0 to 40427 [ 181.693269][ T7207] XFS (loop5): Mounting V5 Filesystem [ 181.698734][ T951] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.729692][ T7203] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 181.750529][ T7203] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 181.760370][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.773668][ T7203] F2FS-fs (loop3): invalid crc value [ 181.784943][ T951] usb 3-1: config 0 descriptor?? [ 181.796882][ T7200] XFS (loop7): Mounting V5 Filesystem [ 181.806150][ T951] cp210x 3-1:0.0: cp210x converter detected [ 181.827579][ T7207] XFS (loop5): Ending clean mount [ 181.842467][ T7203] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.862960][ T7200] XFS (loop7): Ending clean mount [ 181.927889][ T7207] XFS (loop5): Quotacheck needed: Please wait. [ 181.937507][ T7200] XFS (loop7): Quotacheck needed: Please wait. [ 181.991788][ T7211] loop4: detected capacity change from 0 to 40427 [ 182.031652][ T7203] F2FS-fs (loop3): Start checkpoint disabled! [ 182.057998][ T7200] XFS (loop7): Quotacheck: Done. [ 182.060674][ T7211] F2FS-fs (loop4): invalid crc value [ 182.063180][ T7207] XFS (loop5): Quotacheck: Done. [ 182.168139][ T7211] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.185519][ T7203] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 182.210175][ T951] usb 3-1: cp210x converter now attached to ttyUSB0 [ 182.243438][ T6781] XFS (loop7): Unmounting Filesystem [ 182.247783][ T7203] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 182.400196][ T5958] XFS (loop5): Unmounting Filesystem [ 182.424985][ T951] usb 3-1: USB disconnect, device number 5 [ 182.437776][ T7211] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.451446][ T951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.514149][ T951] cp210x 3-1:0.0: device disconnected [ 182.760385][ T4358] kworker/u4:6: attempt to access beyond end of device [ 182.760385][ T4358] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 182.820137][ T4358] kworker/u4:6: attempt to access beyond end of device [ 182.820137][ T4358] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 183.139239][ T7243] loop4: detected capacity change from 0 to 1024 [ 183.242072][ T7243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.245776][ T7247] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 183.381941][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 183.463109][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 183.843220][ T7268] loop2: detected capacity change from 0 to 1024 [ 183.907546][ T7268] hfsplus: bad catalog entry type [ 184.021043][ T4358] hfsplus: b-tree write err: -5, ino 4 [ 184.285242][ T7252] loop7: detected capacity change from 0 to 32768 [ 184.355408][ T7252] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 184.578413][ T6781] ocfs2: Unmounting device (7,7) on (node local) [ 184.618110][ T7289] program syz.4.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.023361][ T7277] loop5: detected capacity change from 0 to 32768 [ 185.235530][ T7288] loop3: detected capacity change from 0 to 32768 [ 185.296872][ T7288] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.1039 (7288) [ 185.366437][ T7288] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 185.406696][ T7288] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 185.440671][ T7288] BTRFS info (device loop3): using free space tree [ 185.525711][ T7291] loop4: detected capacity change from 0 to 32768 [ 185.597254][ T7297] loop5: detected capacity change from 0 to 8192 [ 185.669095][ T7288] BTRFS info (device loop3): enabling ssd optimizations [ 185.706378][ T7293] loop7: detected capacity change from 0 to 32768 [ 185.740326][ T7293] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 186.052753][ T4275] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 186.291130][ T4260] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 186.590535][ T4503] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 186.782375][ T4503] usb 8-1: Using ep0 maxpacket: 16 [ 186.789315][ T4503] usb 8-1: config 0 has no interfaces? [ 186.859663][ T4503] usb 8-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 186.902786][ T4503] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.919015][ T4503] usb 8-1: Product: syz [ 186.929221][ T4503] usb 8-1: Manufacturer: syz [ 186.940530][ T4503] usb 8-1: SerialNumber: syz [ 186.952716][ T4503] usb 8-1: config 0 descriptor?? [ 186.967673][ T6557] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.057048][ T7352] loop2: detected capacity change from 0 to 512 [ 187.071586][ T7352] EXT4-fs: Ignoring removed nobh option [ 187.116425][ T7352] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 187.129017][ T7352] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1061: invalid indirect mapped block 2683928664 (level 1) [ 187.148618][ T7354] loop5: detected capacity change from 0 to 4096 [ 187.150073][ T7352] EXT4-fs (loop2): 1 truncate cleaned up [ 187.161077][ T7352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.186146][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 187.190538][ T6557] usb 5-1: Using ep0 maxpacket: 16 [ 187.201537][ T4840] usb 8-1: USB disconnect, device number 3 [ 187.208647][ T6557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.215433][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 187.222003][ T6557] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 187.241842][ T6557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.252117][ T6557] usb 5-1: config 0 descriptor?? [ 187.277415][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 187.287460][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 187.296109][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 187.305203][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 187.313645][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 187.321932][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 187.331104][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 187.339074][ T7354] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 187.391810][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 187.681729][ T6557] wacom 0003:056A:032C.000B: hidraw0: USB HID v0.05 Device [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 187.953606][ T4503] usb 5-1: USB disconnect, device number 8 [ 188.068912][ T7371] loop7: detected capacity change from 0 to 4096 [ 188.173600][ T7371] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 188.200796][ T7371] ntfs3: loop7: Failed to load $Extend. [ 188.264735][ T7371] ntfs3: loop7: ino=5, "/" directory corrupted [ 188.272674][ T7365] mmap: syz.5.1066 (7365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.281508][ T7371] ntfs3: loop7: ino=5, "/" directory corrupted [ 188.680336][ T7369] loop3: detected capacity change from 0 to 32768 [ 188.708560][ T7373] loop2: detected capacity change from 0 to 32768 [ 188.737921][ T7369] JBD2: Ignoring recovery information on journal [ 188.748543][ T3638] udevd[3638]: worker [4406] terminated by signal 33 (Unknown signal 33) [ 188.770726][ T3638] udevd[3638]: worker [4406] failed while handling '/devices/virtual/block/loop3' [ 188.886262][ T7373] JBD2: Ignoring recovery information on journal [ 188.900198][ T7369] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 189.022567][ T7373] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 189.067334][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 189.274753][ T7402] overlayfs: unrecognized mount option "GPL=û\}" or missing value [ 189.329037][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 189.548069][ T7411] netlink: 'syz.5.1087': attribute type 1 has an invalid length. [ 189.617945][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1088'. [ 189.713105][ T7415] netlink: 642 bytes leftover after parsing attributes in process `syz.7.1089'. [ 190.008245][ T7425] loop5: detected capacity change from 0 to 1024 [ 190.106224][ T7425] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 190.120685][ T6557] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 190.236268][ T7429] use of bytesused == 0 is deprecated and will be removed in the future, [ 190.267758][ T7429] use the actual size instead. [ 190.320717][ T6557] usb 3-1: Using ep0 maxpacket: 16 [ 190.331542][ T6557] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 190.374374][ T7409] loop3: detected capacity change from 0 to 40427 [ 190.381139][ T6557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.389152][ T6557] usb 3-1: Product: syz [ 190.414910][ T6557] usb 3-1: Manufacturer: syz [ 190.419560][ T6557] usb 3-1: SerialNumber: syz [ 190.437005][ T7409] F2FS-fs (loop3): invalid crc value [ 190.456011][ T6557] usb 3-1: config 0 descriptor?? [ 190.471627][ T6557] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 190.489057][ T7437] loop7: detected capacity change from 0 to 64 [ 190.502544][ T7409] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.707306][ T4503] usb 3-1: USB disconnect, device number 6 [ 190.711201][ T7409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.719506][ T7447] loop5: detected capacity change from 0 to 1024 [ 190.984972][ T4275] syz-executor: attempt to access beyond end of device [ 190.984972][ T4275] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.232083][ T7459] tipc: Enabling of bearer rejected, failed to enable media [ 191.237672][ T7461] loop7: detected capacity change from 0 to 164 [ 191.352537][ T7461] isofs: Unable to find the ".." directory for NFS. [ 191.570226][ T7468] loop5: detected capacity change from 0 to 2048 [ 191.635762][ T7468] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.711613][ T7472] loop4: detected capacity change from 0 to 256 [ 191.764622][ T7479] netlink: 'syz.2.1115': attribute type 3 has an invalid length. [ 191.774433][ T7472] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.808536][ T7468] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 191.812590][ T7479] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1115'. [ 191.832807][ T7472] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 191.948696][ T7472] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 192.110136][ T5958] EXT4-fs (loop5): unmounting filesystem. [ 192.378048][ T7495] loop2: detected capacity change from 0 to 512 [ 192.385474][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 192.427604][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 192.526959][ T7495] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 192.573979][ T7495] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 192.610797][ T7495] System zones: 0-1, 15-15, 18-18, 34-34 [ 192.661563][ T7495] EXT4-fs (loop2): orphan cleanup on readonly fs [ 192.690689][ T7495] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 192.773688][ T7495] EXT4-fs warning (device loop2): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 192.849043][ T7495] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 192.878637][ T7495] EXT4-fs (loop2): 1 truncate cleaned up [ 192.887234][ T7495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.976992][ T7495] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 193.012364][ T7518] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 193.121432][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 193.215932][ T7525] loop4: detected capacity change from 0 to 64 [ 193.366904][ T7491] loop7: detected capacity change from 0 to 40427 [ 193.422499][ T7491] F2FS-fs (loop7): invalid crc value [ 193.462076][ T7491] F2FS-fs (loop7): Found nat_bits in checkpoint [ 193.493680][ T7529] loop3: detected capacity change from 0 to 4096 [ 193.600649][ T7529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.662085][ T7491] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 193.764102][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 193.891732][ T6781] syz-executor: attempt to access beyond end of device [ 193.891732][ T6781] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.031560][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.037898][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.138141][ T7533] loop5: detected capacity change from 0 to 32768 [ 194.179026][ T7550] loop3: detected capacity change from 0 to 256 [ 194.245732][ T7550] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 194.355638][ T7533] XFS (loop5): Mounting V5 Filesystem [ 194.403564][ T7546] loop4: detected capacity change from 0 to 8192 [ 194.484857][ T7533] XFS (loop5): Ending clean mount [ 194.530139][ T7546] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 194.560275][ T7533] XFS (loop5): Quotacheck needed: Please wait. [ 194.571843][ T7565] loop7: detected capacity change from 0 to 1024 [ 194.660689][ T7546] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 194.682969][ T7546] REISERFS (device loop4): using ordered data mode [ 194.689532][ T7546] reiserfs: using flush barriers [ 194.705136][ T7565] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 194.726351][ T7533] XFS (loop5): Quotacheck: Done. [ 194.849594][ T7565] EXT4-fs warning (device loop7): empty_inline_dir:1874: bad inline directory (dir #12) - no `..' [ 194.862663][ T7546] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.912916][ T7546] REISERFS (device loop4): checking transaction log (loop4) [ 194.921216][ T5958] XFS (loop5): Unmounting Filesystem [ 194.982031][ T7546] REISERFS (device loop4): Using r5 hash to sort names [ 195.011065][ T7546] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 195.059584][ T6781] EXT4-fs (loop7): unmounting filesystem. [ 195.075792][ T7546] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 195.289439][ T7574] loop7: detected capacity change from 0 to 128 [ 195.841836][ T7560] loop2: detected capacity change from 0 to 32768 [ 196.223163][ T7593] loop5: detected capacity change from 0 to 8192 [ 196.330566][ T4840] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 196.482371][ T7609] random: crng reseeded on system resumption [ 196.552161][ T4840] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.583574][ T4840] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.641019][ T4840] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.669850][ T4840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.705400][ T7596] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 197.058075][ T4840] usb 8-1: USB disconnect, device number 4 [ 197.254771][ T7612] loop5: detected capacity change from 0 to 40427 [ 197.269321][ T7612] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 197.277608][ T7612] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 197.295621][ T7612] F2FS-fs (loop5): Found nat_bits in checkpoint [ 197.339318][ T7612] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 197.349476][ T7612] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 197.370704][ T4500] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.470922][ T6557] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 197.560655][ T4500] usb 5-1: Using ep0 maxpacket: 16 [ 197.581156][ T4500] usb 5-1: config 0 has no interfaces? [ 197.622844][ T4500] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.642276][ T4500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.660521][ T4500] usb 5-1: Product: syz [ 197.665761][ T4500] usb 5-1: Manufacturer: syz [ 197.670383][ T4500] usb 5-1: SerialNumber: syz [ 197.680686][ T6557] usb 4-1: Using ep0 maxpacket: 32 [ 197.681398][ T4500] usb 5-1: config 0 descriptor?? [ 197.691587][ T6557] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 197.745620][ T6557] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 197.768611][ T6557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.806290][ T6557] usb 4-1: Product: syz [ 197.818907][ T6557] usb 4-1: Manufacturer: syz [ 197.834351][ T6557] usb 4-1: SerialNumber: syz [ 197.858970][ T6557] usb 4-1: config 0 descriptor?? [ 197.870546][ T7617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.896427][ T6557] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 198.099023][ T4840] usb 5-1: USB disconnect, device number 9 [ 198.220325][ T7648] loop5: detected capacity change from 0 to 1024 [ 198.242965][ T6557] usb 4-1: USB disconnect, device number 12 [ 198.243012][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 198.309520][ T7648] hfsplus: bad catalog entry type [ 198.358102][ T51] hfsplus: b-tree write err: -5, ino 4 [ 198.681471][ T7658] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 198.710710][ T7643] loop7: detected capacity change from 0 to 32768 [ 199.130606][ T6557] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 199.330522][ T6557] usb 6-1: Using ep0 maxpacket: 16 [ 199.337328][ T6557] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.360538][ T6557] usb 6-1: config 0 has no interface number 0 [ 199.380557][ T6557] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.414599][ T6557] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.455187][ T6557] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 199.495646][ T6557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.533043][ T6557] usb 6-1: config 0 descriptor?? [ 199.910630][ T6558] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 199.987869][ T7672] loop4: detected capacity change from 0 to 32768 [ 200.096958][ T7695] loop3: detected capacity change from 0 to 1024 [ 200.126277][ T6558] usb 8-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 200.167905][ T6557] uclogic 0003:28BD:0071.000C: failed retrieving string descriptor #100: -71 [ 200.183739][ T6558] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.193473][ T6557] uclogic 0003:28BD:0071.000C: failed retrieving pen parameters: -71 [ 200.203247][ T6558] usb 8-1: Product: syz [ 200.208322][ T6558] usb 8-1: Manufacturer: syz [ 200.216619][ T6557] uclogic 0003:28BD:0071.000C: pen probing failed: -71 [ 200.225418][ T6558] usb 8-1: SerialNumber: syz [ 200.234904][ T7695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.236058][ T6558] usb 8-1: config 0 descriptor?? [ 200.248703][ T6557] uclogic 0003:28BD:0071.000C: failed probing parameters: -71 [ 200.257216][ T7672] XFS (loop4): Mounting V5 Filesystem [ 200.267953][ T6557] uclogic: probe of 0003:28BD:0071.000C failed with error -71 [ 200.270741][ T7695] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.291999][ T7684] loop2: detected capacity change from 0 to 32768 [ 200.292351][ T6558] usb 8-1: interface 1 not found [ 200.308007][ T6557] usb 6-1: USB disconnect, device number 5 [ 200.356077][ T7684] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 200.362376][ T7672] XFS (loop4): Ending clean mount [ 200.425514][ T7672] XFS (loop4): Quotacheck needed: Please wait. [ 200.439689][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 200.517853][ T7672] XFS (loop4): Quotacheck: Done. [ 200.564521][ T6557] usb 8-1: USB disconnect, device number 5 [ 200.629999][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1206'. [ 200.648649][ T4268] XFS (loop4): Unmounting Filesystem [ 200.654766][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1206'. [ 200.671170][ T7705] Zero length message leads to an empty skb [ 200.750316][ T4407] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 200.892246][ T7712] binder: BINDER_SET_CONTEXT_MGR already set [ 200.952920][ T7712] binder: 7711:7712 ioctl 40046207 0 returned -16 [ 201.653176][ T7734] loop2: detected capacity change from 0 to 512 [ 201.692050][ T7734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.739023][ T7734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.804908][ T7734] EXT4-fs (loop2): 1 truncate cleaned up [ 201.817033][ T7734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.833602][ T7724] loop5: detected capacity change from 0 to 40427 [ 201.857927][ T7724] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 201.866845][ T7724] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 201.926350][ T7724] F2FS-fs (loop5): Found nat_bits in checkpoint [ 202.016113][ T7724] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 202.029045][ T7724] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 202.052446][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 202.160109][ T7724] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 202.439121][ T7747] Bluetooth: MGMT ver 1.22 [ 202.564436][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1223'. [ 202.650048][ T7754] device dummy0 entered promiscuous mode [ 202.666171][ T7754] device dummy0 left promiscuous mode [ 202.738875][ T7760] loop7: detected capacity change from 0 to 256 [ 202.770916][ T7760] exfat: Deprecated parameter 'utf8' [ 202.841724][ T7760] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 202.944475][ T7764] loop5: detected capacity change from 0 to 512 [ 202.970345][ T7764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.028878][ T7764] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 203.058930][ T7764] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.109969][ T5958] EXT4-fs (loop5): unmounting filesystem. [ 203.410080][ T7776] loop3: detected capacity change from 0 to 8 [ 203.427341][ T7776] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 203.436901][ T4840] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 203.497163][ T7756] loop4: detected capacity change from 0 to 32768 [ 203.544807][ T7756] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 203.565670][ T7756] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 203.604966][ T7756] BTRFS info (device loop4): enabling auto defrag [ 203.620054][ T7756] BTRFS info (device loop4): max_inline at 0 [ 203.631176][ T6557] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 203.637467][ T7756] BTRFS info (device loop4): force clearing of disk cache [ 203.651413][ T4840] usb 8-1: Using ep0 maxpacket: 8 [ 203.658751][ T4840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 203.661113][ T7780] loop3: detected capacity change from 0 to 64 [ 203.673639][ T4840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.678653][ T7756] BTRFS info (device loop4): turning on sync discard [ 203.694241][ T7756] BTRFS info (device loop4): using free space tree [ 203.701103][ T4840] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.786029][ T4840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 203.806073][ T4840] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 203.817366][ T4840] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 203.826600][ T4840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.836447][ T6557] usb 6-1: config index 0 descriptor too short (expected 4132, got 36) [ 203.847597][ T4840] usb 8-1: config 0 descriptor?? [ 203.852919][ T6557] usb 6-1: config 0 has an invalid interface number: 32 but max is 16 [ 203.881207][ T7768] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 203.928988][ T6557] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 203.951258][ T7800] loop3: detected capacity change from 0 to 512 [ 203.989599][ T7756] BTRFS info (device loop4): enabling ssd optimizations [ 203.991190][ T6557] usb 6-1: config 0 has no interface number 0 [ 204.005951][ T6557] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.018533][ T6557] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.019604][ T7756] BTRFS info (device loop4): rebuilding free space tree [ 204.029549][ T6557] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 204.045241][ T6557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.047974][ T7800] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.055897][ T6557] usb 6-1: config 0 descriptor?? [ 204.162705][ T7800] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.226322][ T4268] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.259456][ T7800] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.1239: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 204.399122][ T4281] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 204.417516][ T951] usb 8-1: USB disconnect, device number 6 [ 204.432733][ T7800] EXT4-fs (loop3): Remounting filesystem read-only [ 204.446277][ T7800] EXT4-fs error (device loop3): ext4_evict_inode:290: comm syz.3.1239: couldn't truncate inode 15 (err -117) [ 204.482651][ T6557] uclogic 0003:256C:006D.000D: interface is invalid, ignoring [ 204.523597][ T7800] EXT4-fs (loop3): Remounting filesystem read-only [ 204.716013][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 204.724531][ T6558] usb 6-1: USB disconnect, device number 6 [ 204.797410][ T7815] loop4: detected capacity change from 0 to 1024 [ 204.843622][ T7815] hfsplus: bad catalog entry type [ 204.871196][ T62] hfsplus: b-tree write err: -5, ino 4 [ 204.949913][ T7819] loop4: detected capacity change from 0 to 64 [ 205.149652][ T7825] loop4: detected capacity change from 0 to 1024 [ 205.175576][ T7825] EXT4-fs (loop4): Test dummy encryption mode enabled [ 205.183842][ T7825] EXT4-fs (loop4): can't mount with commit=4, fs mounted w/o journal [ 205.369919][ T7829] loop4: detected capacity change from 0 to 4096 [ 205.376585][ T4257] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 205.389704][ T7829] NILFS: invalid option "cp=0x00": invalid checkpoint number 0 [ 205.405751][ T7829] overlayfs: unrecognized mount option "\strict" or missing value [ 205.561487][ T4257] usb 8-1: Using ep0 maxpacket: 32 [ 205.578582][ T4257] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 205.621529][ T4257] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.659794][ T4257] usb 8-1: config 0 descriptor?? [ 205.961106][ T7850] syz.2.1260[7850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.961297][ T7850] syz.2.1260[7850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.974285][ T7852] loop5: detected capacity change from 0 to 256 [ 206.082873][ T4257] lua 0003:1E7D:2C2E.000E: item fetching failed at offset 3/7 [ 206.101208][ T4257] lua 0003:1E7D:2C2E.000E: parse failed [ 206.118739][ T4257] lua: probe of 0003:1E7D:2C2E.000E failed with error -22 [ 206.283161][ T4257] usb 8-1: USB disconnect, device number 7 [ 206.340396][ T7860] loop2: detected capacity change from 0 to 128 [ 206.616296][ T7870] loop4: detected capacity change from 0 to 512 [ 206.664276][ T4500] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.704512][ T7870] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 206.725053][ T7870] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 206.769363][ T7870] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.1270: iget: bad i_size value: 12154757448730 [ 206.794984][ T7858] loop5: detected capacity change from 0 to 32768 [ 206.844940][ T7870] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1270: couldn't read orphan inode 13 (err -117) [ 206.860693][ T4500] usb 4-1: Using ep0 maxpacket: 16 [ 206.867994][ T4500] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 206.870418][ T7870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 206.939542][ T4500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.953490][ T26] audit: type=1326 audit(1758301539.090:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.7.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04fb8ec29 code=0x7ffc0000 [ 206.990339][ T4500] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 207.004176][ T26] audit: type=1326 audit(1758301539.110:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.7.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04fb8ec29 code=0x7ffc0000 [ 207.067803][ T4500] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 207.100560][ T26] audit: type=1326 audit(1758301539.110:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.7.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb04fb8ec29 code=0x7ffc0000 [ 207.109780][ T4500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.154401][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 207.187259][ T26] audit: type=1326 audit(1758301539.120:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.7.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04fb8ec29 code=0x7ffc0000 [ 207.201380][ T4500] usb 4-1: config 0 descriptor?? [ 207.275928][ T7858] XFS (loop5): Mounting V5 Filesystem [ 207.403141][ T7858] XFS (loop5): Ending clean mount [ 207.476300][ T26] audit: type=1326 audit(1758301539.610:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d58ec29 code=0x7ffc0000 [ 207.570993][ T5958] XFS (loop5): Unmounting Filesystem [ 207.577358][ T26] audit: type=1326 audit(1758301539.660:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6e1d58ec29 code=0x7ffc0000 [ 207.601191][ T26] audit: type=1326 audit(1758301539.660:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d58ec29 code=0x7ffc0000 [ 207.629765][ T26] audit: type=1326 audit(1758301539.660:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f6e1d58ec29 code=0x7ffc0000 [ 207.660151][ T4257] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 207.711091][ T26] audit: type=1326 audit(1758301539.670:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d58ec29 code=0x7ffc0000 [ 207.728142][ T7906] loop4: detected capacity change from 0 to 512 [ 207.736222][ T4500] samsung 0003:0419:0001.000F: item fetching failed at offset 8/11 [ 207.770165][ T4500] samsung 0003:0419:0001.000F: parse failed [ 207.779816][ T4500] samsung: probe of 0003:0419:0001.000F failed with error -22 [ 207.831003][ T7906] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.847550][ T7906] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.871711][ T4257] usb 8-1: Using ep0 maxpacket: 8 [ 207.890043][ T4257] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.920352][ T4257] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.970523][ T4257] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 208.015196][ T4257] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.059684][ T4257] hub 8-1:1.0: bad descriptor, ignoring hub [ 208.072592][ T4257] hub: probe of 8-1:1.0 failed with error -5 [ 208.084708][ T6558] usb 4-1: USB disconnect, device number 13 [ 208.186068][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 208.245802][ T7917] loop2: detected capacity change from 0 to 16 [ 208.281914][ T7917] erofs: (device loop2): mounted with root inode @ nid 36. [ 208.285059][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.324182][ T26] audit: type=1800 audit(1758301540.460:66): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1288" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 208.360739][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.401063][ T4281] Bluetooth: hci6: Unknown advertising packet type: 0x5f [ 208.526527][ T7925] loop2: detected capacity change from 0 to 512 [ 208.568676][ T4500] usb 8-1: USB disconnect, device number 8 [ 208.589837][ T7925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 208.599072][ T7925] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.757557][ T7933] loop3: detected capacity change from 0 to 512 [ 208.767107][ T7933] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 208.789359][ T7933] EXT4-fs (loop3): invalid journal inode [ 208.791923][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 208.796374][ T7933] EXT4-fs (loop3): can't get journal size [ 208.850618][ T6558] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 208.856562][ T7933] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c119, mo2=0002] [ 208.873781][ T7933] System zones: 1-12, 13-13 [ 208.926828][ T7933] EXT4-fs (loop3): 1 truncate cleaned up [ 208.943846][ T7933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 209.040659][ T6558] usb 6-1: Using ep0 maxpacket: 16 [ 209.048157][ T6558] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.064005][ T7941] device wlan1 entered promiscuous mode [ 209.069792][ T6558] usb 6-1: config 0 has no interface number 0 [ 209.081558][ T7941] device macvtap1 entered promiscuous mode [ 209.088455][ T6558] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 209.098222][ T6558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.117719][ T6558] usb 6-1: Product: syz [ 209.126222][ T6558] usb 6-1: Manufacturer: syz [ 209.137205][ T6558] usb 6-1: SerialNumber: syz [ 209.158394][ T6558] usb 6-1: config 0 descriptor?? [ 209.177476][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 209.177874][ T6558] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 209.184068][ T7941] device wlan1 left promiscuous mode [ 209.329120][ T7945] loop3: detected capacity change from 0 to 256 [ 209.351407][ T7947] hugetlbfs: Bad value 't' for mount option 'size' [ 209.351407][ T7947] [ 209.382357][ T7945] exfat: Deprecated parameter 'utf8' [ 209.434148][ T7945] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 209.813858][ T6558] gspca_spca1528: reg_w err -71 [ 209.840675][ T6558] spca1528: probe of 6-1:0.1 failed with error -71 [ 209.860733][ T4331] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 209.871281][ T6558] usb 6-1: USB disconnect, device number 7 [ 210.062254][ T4331] usb 5-1: config 0 has no interfaces? [ 210.070634][ T4331] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.115903][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.144655][ T4331] usb 5-1: Product: syz [ 210.159512][ T4331] usb 5-1: Manufacturer: syz [ 210.165578][ T4331] usb 5-1: SerialNumber: syz [ 210.182373][ T4331] usb 5-1: config 0 descriptor?? [ 210.628897][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'. [ 210.706072][ T4500] usb 5-1: USB disconnect, device number 10 [ 210.937814][ T7992] loop5: detected capacity change from 0 to 256 [ 210.968326][ T7992] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 211.317448][ T8004] loop7: detected capacity change from 0 to 64 [ 212.086551][ T8030] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 212.190848][ T8030] CIFS mount error: No usable UNC path provided in device string! [ 212.190848][ T8030] [ 212.243503][ T8030] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 212.300642][ T4500] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.502515][ T4500] usb 3-1: Using ep0 maxpacket: 8 [ 212.515101][ T4500] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 212.557723][ T4500] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 212.584553][ T4500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.610527][ T4500] usb 3-1: Product: syz [ 212.615729][ T4500] usb 3-1: Manufacturer: syz [ 212.620345][ T4500] usb 3-1: SerialNumber: syz [ 212.663705][ T4500] usb 3-1: config 0 descriptor?? [ 212.684695][ T4500] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 212.690138][ T8018] loop3: detected capacity change from 0 to 32768 [ 212.760229][ T4500] usb 3-1: setting power ON [ 212.783030][ T4500] dvb-usb: bulk message failed: -22 (2/0) [ 212.800514][ T951] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 212.835360][ T4500] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.855101][ T4500] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 212.868319][ T4500] usb 3-1: media controller created [ 212.888917][ T8027] dvb-usb: bulk message failed: -22 (3/0) [ 212.897232][ T4500] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.905200][ T8027] dvb-usb: bulk message failed: -22 (4/0) [ 212.912069][ T8018] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 212.957743][ T8027] cxusb: i2c read failed [ 212.992349][ T951] usb 8-1: config index 0 descriptor too short (expected 4132, got 36) [ 212.996105][ T4500] usb 3-1: selecting invalid altsetting 6 [ 213.008582][ T951] usb 8-1: config 0 has an invalid interface number: 32 but max is 16 [ 213.025424][ T4500] usb 3-1: digital interface selection failed (-22) [ 213.040327][ T951] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 213.054163][ T4500] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 213.085432][ T951] usb 8-1: config 0 has no interface number 0 [ 213.085704][ T4500] usb 3-1: setting power OFF [ 213.103857][ T951] usb 8-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.116318][ T4500] dvb-usb: bulk message failed: -22 (2/0) [ 213.135856][ T951] usb 8-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.144160][ T4500] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 213.154709][ T951] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 213.174512][ T4500] (NULL device *): no alternate interface [ 213.181240][ T951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.195284][ T4275] XFS (loop3): Unmounting Filesystem [ 213.212855][ T951] usb 8-1: config 0 descriptor?? [ 213.291516][ T4500] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 213.325890][ T4500] usb 3-1: USB disconnect, device number 7 [ 213.488711][ T8064] loop4: detected capacity change from 0 to 512 [ 213.572063][ T8064] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.590879][ T8064] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.634377][ T951] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 213.844657][ T8072] tmpfs: Too few inodes for current use [ 213.848181][ T951] usb 8-1: USB disconnect, device number 9 [ 213.889849][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 214.206195][ T8085] loop5: detected capacity change from 0 to 256 [ 214.748402][ T8096] loop3: detected capacity change from 0 to 4096 [ 214.793166][ T8075] loop4: detected capacity change from 0 to 32768 [ 214.818934][ T8075] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1355 (8075) [ 214.845840][ T8102] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.864300][ T8101] loop2: detected capacity change from 0 to 512 [ 214.894258][ T8075] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 214.937023][ T8075] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 215.006866][ T8101] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 215.016230][ T8075] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 215.047781][ T8101] EXT4-fs (loop2): invalid journal inode [ 215.067596][ T8075] BTRFS info (device loop4): use lzo compression, level 0 [ 215.091577][ T8101] EXT4-fs (loop2): can't get journal size [ 215.107337][ T8075] BTRFS info (device loop4): using free space tree [ 215.152103][ T8101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c119, mo2=0002] [ 215.204230][ T8101] System zones: 1-12, 13-13 [ 215.269039][ T8117] netlink: 'syz.3.1370': attribute type 2 has an invalid length. [ 215.322328][ T8075] BTRFS info (device loop4): enabling ssd optimizations [ 215.361040][ T8101] EXT4-fs (loop2): 1 truncate cleaned up [ 215.366729][ T8101] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.481588][ T4268] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 215.546900][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 215.855815][ T8137] CIFS mount error: No usable UNC path provided in device string! [ 215.855815][ T8137] [ 215.858093][ T8135] vivid-002: disconnect [ 215.867204][ T8137] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 215.924817][ T8134] vivid-002: reconnect [ 215.960805][ T951] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 215.970712][ T4414] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 216.150532][ T951] usb 3-1: Using ep0 maxpacket: 8 [ 216.159663][ T951] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 216.160680][ T4414] usb 8-1: Using ep0 maxpacket: 16 [ 216.189504][ T8145] netlink: 408 bytes leftover after parsing attributes in process `syz.5.1379'. [ 216.196041][ T4414] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.209684][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.228470][ T951] usb 3-1: Product: syz [ 216.229163][ T4414] usb 8-1: config 0 has no interface number 0 [ 216.232801][ T8145] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1379'. [ 216.245231][ T8147] loop4: detected capacity change from 0 to 1024 [ 216.253719][ T951] usb 3-1: Manufacturer: syz [ 216.258841][ T951] usb 3-1: SerialNumber: syz [ 216.262763][ T4414] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 216.271783][ T951] usb 3-1: config 0 descriptor?? [ 216.292289][ T951] gspca_main: se401-2.14.0 probing 047d:5003 [ 216.293360][ T8147] EXT4-fs: Ignoring removed orlov option [ 216.307507][ T4414] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.344560][ T4414] usb 8-1: Product: syz [ 216.348812][ T4414] usb 8-1: Manufacturer: syz [ 216.393010][ T4414] usb 8-1: SerialNumber: syz [ 216.420302][ T4414] usb 8-1: config 0 descriptor?? [ 216.432914][ T8147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 216.449141][ T4414] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 216.494923][ T8156] loop3: detected capacity change from 0 to 512 [ 216.574931][ T8147] EXT4-fs (loop4): can't enable nombcache during remount [ 216.619048][ T8156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.650774][ T8156] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.698546][ T951] gspca_se401: Bayer format not supported! [ 216.768218][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 216.777864][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 216.929424][ T951] usb 3-1: USB disconnect, device number 8 [ 216.958014][ T8169] loop3: detected capacity change from 0 to 256 [ 216.984578][ T8169] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 217.007679][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 217.007692][ T26] audit: type=1800 audit(1758301549.140:68): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1386" name="file1" dev="loop3" ino=1048674 res=0 errno=0 [ 217.088491][ T4414] gspca_spca1528: reg_w err -71 [ 217.121514][ T4414] spca1528: probe of 8-1:0.1 failed with error -71 [ 217.150421][ T4414] usb 8-1: USB disconnect, device number 10 [ 217.230944][ T6558] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 217.430531][ T6558] usb 6-1: Using ep0 maxpacket: 32 [ 217.437076][ T6558] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.454457][ T6558] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 217.463821][ T6558] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 217.472288][ T6558] usb 6-1: Product: syz [ 217.476528][ T6558] usb 6-1: Manufacturer: syz [ 217.485773][ T6558] hub 6-1:4.0: USB hub found [ 217.546383][ T8175] program syz.3.1393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.689170][ T6558] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 217.741324][ T6558] usb 6-1: USB disconnect, device number 8 [ 217.882318][ T8185] netlink: 'syz.4.1398': attribute type 1 has an invalid length. [ 218.582795][ T8183] loop7: detected capacity change from 0 to 32768 [ 218.690264][ T8211] loop2: detected capacity change from 0 to 256 [ 218.756001][ T8211] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x59eca5ea, utbl_chksum : 0xe619d30d) [ 218.807742][ T8183] XFS (loop7): Mounting V5 Filesystem [ 218.956339][ T8183] XFS (loop7): Ending clean mount [ 219.170558][ T951] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 219.362486][ T951] usb 6-1: config 0 has no interfaces? [ 219.370114][ T951] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 219.388493][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.397035][ T951] usb 6-1: Product: syz [ 219.407917][ T951] usb 6-1: Manufacturer: syz [ 219.417931][ T951] usb 6-1: SerialNumber: syz [ 219.434309][ T951] usb 6-1: config 0 descriptor?? [ 219.722270][ T6781] XFS (loop7): Unmounting Filesystem [ 219.805345][ T4840] usb 6-1: USB disconnect, device number 9 [ 219.823513][ T8232] netlink: 'syz.2.1415': attribute type 2 has an invalid length. [ 220.501370][ T8254] loop2: detected capacity change from 0 to 1024 [ 220.537164][ T8254] hfsplus: bad catalog entry type [ 220.676031][ T6221] hfsplus: b-tree write err: -5, ino 4 [ 221.103219][ T4411] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.282257][ T8256] loop5: detected capacity change from 0 to 32768 [ 221.304968][ T8256] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1425 (8256) [ 221.305468][ T4411] usb 3-1: Using ep0 maxpacket: 8 [ 221.345420][ T8258] loop7: detected capacity change from 0 to 32768 [ 221.348004][ T4411] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 221.369827][ T8256] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 221.372491][ T4411] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 221.396959][ T8256] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 221.410176][ T4411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.419469][ T8256] BTRFS info (device loop5): use zlib compression, level 3 [ 221.443260][ T8256] BTRFS info (device loop5): turning on flush-on-commit [ 221.460310][ T26] audit: type=1800 audit(1758301553.590:69): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1424" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 221.462290][ T8256] BTRFS info (device loop5): allowing degraded mounts [ 221.489073][ T4411] usb 3-1: Product: syz [ 221.491983][ T8258] ERROR: (device loop7): dbAllocAG: unable to allocate blocks [ 221.491983][ T8258] [ 221.498433][ T4411] usb 3-1: Manufacturer: syz [ 221.513880][ T8256] BTRFS info (device loop5): enabling ssd optimizations [ 221.528773][ T4411] usb 3-1: SerialNumber: syz [ 221.533886][ T8258] ERROR: (device loop7): dbDiscardAG: -EIO [ 221.533886][ T8258] [ 221.545384][ T4411] usb 3-1: config 0 descriptor?? [ 221.547377][ T8256] BTRFS info (device loop5): using spread ssd allocation scheme [ 221.561181][ T8268] loop3: detected capacity change from 0 to 32768 [ 221.569064][ T4411] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 221.571854][ T8256] BTRFS info (device loop5): using free space tree [ 221.601415][ T4411] usb 3-1: setting power ON [ 221.608973][ T4411] dvb-usb: bulk message failed: -22 (2/0) [ 221.627774][ T4411] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.642379][ T8268] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 221.657529][ T8268] XFS (loop3): Mounting V5 Filesystem [ 221.676974][ T4411] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 221.755779][ T4411] usb 3-1: media controller created [ 221.769135][ T8264] dvb-usb: bulk message failed: -22 (3/0) [ 221.814511][ T8264] cxusb: i2c wr: len=80 is too big! [ 221.814511][ T8264] [ 221.828176][ T8288] IPVS: ip_vs_add_dest(): server weight less than zero [ 221.869133][ T4411] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.889179][ T4411] usb 3-1: selecting invalid altsetting 6 [ 221.891378][ T8268] XFS (loop3): Ending clean mount [ 221.895257][ T4411] usb 3-1: digital interface selection failed (-22) [ 221.907257][ T4411] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 221.916955][ T4411] usb 3-1: setting power OFF [ 221.932689][ T8268] XFS (loop3): Quotacheck needed: Please wait. [ 221.946723][ T4411] dvb-usb: bulk message failed: -22 (2/0) [ 221.991785][ T4411] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 222.030543][ T4411] (NULL device *): no alternate interface [ 222.082174][ T4411] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 222.108683][ T4411] usb 3-1: USB disconnect, device number 9 [ 222.134657][ T8268] XFS (loop3): Quotacheck: Done. [ 222.361324][ T5958] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.374800][ T4275] XFS (loop3): Unmounting Filesystem [ 222.568990][ T4748] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop5 scanned by udevd (4748) [ 222.869807][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 222.904080][ T8307] device dummy0 entered promiscuous mode [ 222.953313][ T8307] device dummy0 left promiscuous mode [ 223.589511][ T8328] program syz.3.1436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.662431][ T41] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 223.699541][ T8320] loop2: detected capacity change from 0 to 65536 [ 223.778413][ T8320] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 223.787994][ T8320] XFS (loop2): Mounting V5 Filesystem [ 223.827707][ T8320] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 223.847575][ T8320] XFS (loop2): failed to locate log tail [ 223.853344][ T8320] XFS (loop2): log mount/recovery failed: error -74 [ 223.881418][ T41] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 223.889252][ T8320] XFS (loop2): log mount failed [ 223.909717][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.939180][ T41] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.953621][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.985883][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.004560][ T41] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.020388][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.047018][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.076134][ T41] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.107794][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.129876][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.158803][ T41] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.176800][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.198891][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.221374][ T41] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.251841][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.282332][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.296356][ T8331] loop3: detected capacity change from 0 to 32768 [ 224.309255][ T41] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.326753][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.339712][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.367368][ T41] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.372738][ T26] audit: type=1800 audit(1758301556.510:70): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1447" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 224.406534][ T8331] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 224.406534][ T8331] [ 224.418922][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.444647][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.483435][ T8331] ERROR: (device loop3): dbDiscardAG: -EIO [ 224.483435][ T8331] [ 224.510623][ T41] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.555127][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.587618][ T41] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 224.619055][ T41] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 224.651867][ T41] usb 5-1: Product: syz [ 224.656100][ T41] usb 5-1: Manufacturer: syz [ 224.683016][ T41] usb 5-1: SerialNumber: syz [ 224.721951][ T41] usb 5-1: config 0 descriptor?? [ 224.783682][ T41] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 225.012531][ T4500] usb 5-1: USB disconnect, device number 11 [ 225.027655][ T4500] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 225.056408][ T8353] loop5: detected capacity change from 0 to 2048 [ 225.090121][ T8353] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 225.168747][ T8359] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.309599][ T8341] loop2: detected capacity change from 0 to 32768 [ 225.355426][ T8341] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 225.449723][ T8365] loop7: detected capacity change from 0 to 1024 [ 225.567417][ T8365] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 225.568110][ T4748] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 225.603024][ T8365] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.613829][ T41] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 225.799303][ T6781] EXT4-fs (loop7): unmounting filesystem. [ 225.844040][ T41] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 225.873971][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.910899][ T41] usb 6-1: Product: syz [ 225.929611][ T41] usb 6-1: Manufacturer: syz [ 225.950471][ T41] usb 6-1: SerialNumber: syz [ 225.977468][ T41] usb 6-1: config 0 descriptor?? [ 226.002779][ T41] usb 6-1: interface 1 not found [ 226.061193][ T8378] loop3: detected capacity change from 0 to 8192 [ 226.209871][ T41] usb 6-1: USB disconnect, device number 10 [ 226.463873][ T8374] loop2: detected capacity change from 0 to 32768 [ 226.596384][ T8376] loop4: detected capacity change from 0 to 32768 [ 226.657413][ T26] audit: type=1800 audit(1758301558.790:71): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1463" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 226.663992][ T8376] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 226.663992][ T8376] [ 226.722935][ T8376] ERROR: (device loop4): dbDiscardAG: -EIO [ 226.722935][ T8376] [ 226.787636][ T8380] loop7: detected capacity change from 0 to 32768 [ 226.864006][ T8380] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 227.001637][ T8388] loop5: detected capacity change from 0 to 512 [ 227.053057][ T8388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.108511][ T8388] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.180274][ T8388] EXT4-fs (loop5): 1 truncate cleaned up [ 227.200688][ T8388] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 227.297198][ T4260] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 227.363472][ T5958] EXT4-fs (loop5): unmounting filesystem. [ 227.494101][ T8399] loop4: detected capacity change from 0 to 512 [ 227.590275][ T8399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.617274][ T8399] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.619513][ T8384] loop3: detected capacity change from 0 to 32768 [ 227.642672][ T8399] EXT4-fs error (device loop4): ext4_ext_remove_space:2930: inode #15: comm syz.4.1474: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 227.660602][ T41] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 227.660718][ T4411] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 227.677391][ T8399] EXT4-fs (loop4): Remounting filesystem read-only [ 227.684396][ T8399] EXT4-fs error (device loop4): ext4_evict_inode:290: comm syz.4.1474: couldn't truncate inode 15 (err -117) [ 227.697307][ T8399] EXT4-fs (loop4): Remounting filesystem read-only [ 227.754521][ T8384] XFS (loop3): Mounting V5 Filesystem [ 227.811853][ T8384] XFS (loop3): Ending clean mount [ 227.838520][ T8384] XFS (loop3): Quotacheck needed: Please wait. [ 227.860634][ T41] usb 8-1: Using ep0 maxpacket: 16 [ 227.868023][ T41] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.881439][ T4411] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 227.891169][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 227.901109][ T4411] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.906321][ T41] usb 8-1: config 0 has no interface number 0 [ 227.920246][ T4411] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.926385][ T41] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.940890][ T4411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 227.949809][ T4411] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.969526][ T41] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.989760][ T4411] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.000309][ T41] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 228.019899][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.028481][ T4411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.043802][ T41] usb 8-1: config 0 descriptor?? [ 228.070260][ T4411] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.094277][ T8384] XFS (loop3): Quotacheck: Done. [ 228.107145][ T4411] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.118430][ T4411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.149788][ T4411] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.169287][ T4411] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.200504][ T4411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.210029][ T8401] loop5: detected capacity change from 0 to 32768 [ 228.222947][ T4411] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.243261][ T4411] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.254867][ T4411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.267326][ T4411] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.286814][ T4411] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.308288][ T4411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.312957][ T8401] XFS (loop5): Mounting V5 Filesystem [ 228.332961][ T4275] XFS (loop3): Unmounting Filesystem [ 228.344674][ T4411] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.357462][ T4411] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.370202][ T4411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.387460][ T8401] XFS (loop5): Ending clean mount [ 228.471254][ T4411] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.486436][ T4411] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.499379][ T4411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.532088][ T4411] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.542307][ T8401] XFS (loop5): Quotacheck needed: Please wait. [ 228.552626][ T4411] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.561455][ T4411] usb 3-1: Product: syz [ 228.565800][ T4411] usb 3-1: Manufacturer: syz [ 228.570415][ T4411] usb 3-1: SerialNumber: syz [ 228.584962][ T4411] usb 3-1: config 0 descriptor?? [ 228.622275][ T8401] XFS (loop5): Quotacheck: Done. [ 228.654487][ T4411] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 228.667918][ T41] uclogic 0003:28BD:0071.0011: failed retrieving string descriptor #100: -71 [ 228.684426][ T41] uclogic 0003:28BD:0071.0011: failed retrieving pen parameters: -71 [ 228.695457][ T41] uclogic 0003:28BD:0071.0011: pen probing failed: -71 [ 228.703022][ T41] uclogic 0003:28BD:0071.0011: failed probing parameters: -71 [ 228.710952][ T41] uclogic: probe of 0003:28BD:0071.0011 failed with error -71 [ 228.721075][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 228.730518][ T41] usb 8-1: USB disconnect, device number 11 [ 228.753363][ T5958] XFS (loop5): Unmounting Filesystem [ 228.913651][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 228.931312][ T22] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 228.979742][ T22] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 228.987453][ T4411] usb 3-1: USB disconnect, device number 10 [ 229.001051][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.008729][ T4411] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 229.019385][ T22] usb 5-1: Product: syz [ 229.024007][ T22] usb 5-1: Manufacturer: syz [ 229.028618][ T22] usb 5-1: SerialNumber: syz [ 229.069112][ T22] usb 5-1: config 0 descriptor?? [ 229.076733][ T8423] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 229.088114][ T22] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 229.279141][ T8428] loop5: detected capacity change from 0 to 64 [ 229.341563][ T4411] usb 5-1: USB disconnect, device number 12 [ 229.341620][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 229.870688][ T4411] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.969132][ T8445] random: crng reseeded on system resumption [ 230.066414][ T4411] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 230.080548][ T4411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.098753][ T4411] usb 3-1: Product: syz [ 230.118765][ T4411] usb 3-1: Manufacturer: syz [ 230.123498][ T4411] usb 3-1: SerialNumber: syz [ 230.147606][ T4411] usb 3-1: config 0 descriptor?? [ 230.158720][ T4411] usb 3-1: interface 1 not found [ 230.366720][ T4411] usb 3-1: USB disconnect, device number 11 [ 230.458936][ T8444] loop4: detected capacity change from 0 to 32768 [ 230.518135][ T8444] XFS (loop4): Mounting V5 Filesystem [ 230.577429][ T8450] loop7: detected capacity change from 0 to 32768 [ 230.604298][ T8444] XFS (loop4): Ending clean mount [ 230.620590][ T8450] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1488 (8450) [ 230.640610][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 230.669971][ T41] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 230.683104][ T8450] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 230.718342][ T8450] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 230.741360][ T8450] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 230.762256][ T8450] BTRFS info (device loop7): use lzo compression, level 0 [ 230.769409][ T8450] BTRFS info (device loop7): using free space tree [ 230.788220][ T4268] XFS (loop4): Unmounting Filesystem [ 230.861284][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 230.868981][ T22] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.884140][ T41] usb 6-1: config 0 has no interfaces? [ 230.898004][ T22] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.921566][ T41] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 230.946919][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.965629][ T22] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.995975][ T41] usb 6-1: Product: syz [ 231.000297][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.010983][ T41] usb 6-1: Manufacturer: syz [ 231.015610][ T41] usb 6-1: SerialNumber: syz [ 231.060015][ T8447] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 231.067789][ T8450] BTRFS info (device loop7): enabling ssd optimizations [ 231.099281][ T41] usb 6-1: config 0 descriptor?? [ 231.186701][ T8480] loop2: detected capacity change from 0 to 512 [ 231.254376][ T8480] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 231.309162][ T8480] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 231.344169][ T8480] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.1489: iget: bad i_size value: 12154757448730 [ 231.366389][ T8450] BTRFS warning (device loop7): failed to trim 1 device(s), last error -512 [ 231.458584][ T6781] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 231.473347][ T8480] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1489: couldn't read orphan inode 13 (err -117) [ 231.480732][ T22] usb 6-1: USB disconnect, device number 11 [ 231.511357][ T8480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.856558][ T4317] usb 4-1: USB disconnect, device number 14 [ 231.862408][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 232.118516][ T8492] loop2: detected capacity change from 0 to 1024 [ 232.204467][ T8492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 232.383052][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 232.487880][ T8488] loop4: detected capacity change from 0 to 32768 [ 232.700541][ T6558] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 232.910537][ T6558] usb 6-1: Using ep0 maxpacket: 8 [ 232.919373][ T6558] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 232.950551][ T6558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.958675][ T6558] usb 6-1: Product: syz [ 232.968792][ T6558] usb 6-1: Manufacturer: syz [ 232.978898][ T6558] usb 6-1: SerialNumber: syz [ 233.002902][ T6558] usb 6-1: config 0 descriptor?? [ 233.029650][ T6558] gspca_main: se401-2.14.0 probing 047d:5003 [ 233.092434][ T8500] loop3: detected capacity change from 0 to 32768 [ 233.180240][ T8500] XFS (loop3): Mounting V5 Filesystem [ 233.281196][ T125] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 233.304960][ T8500] XFS (loop3): Ending clean mount [ 233.313910][ T8500] XFS (loop3): Quotacheck needed: Please wait. [ 233.363607][ T8510] loop2: detected capacity change from 0 to 32768 [ 233.389864][ T8500] XFS (loop3): Quotacheck: Done. [ 233.438394][ T6558] gspca_se401: Bayer format not supported! [ 233.483412][ T125] usb 8-1: config 0 has no interfaces? [ 233.500687][ T125] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 233.520520][ T125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.523308][ T4275] XFS (loop3): Unmounting Filesystem [ 233.528845][ T125] usb 8-1: Product: syz [ 233.538257][ T125] usb 8-1: Manufacturer: syz [ 233.550133][ T8510] XFS (loop2): Mounting V5 Filesystem [ 233.571191][ T125] usb 8-1: SerialNumber: syz [ 233.630892][ T125] usb 8-1: config 0 descriptor?? [ 233.652967][ T6558] usb 6-1: USB disconnect, device number 12 [ 233.696137][ T8510] XFS (loop2): Ending clean mount [ 233.857172][ T8526] loop4: detected capacity change from 0 to 32768 [ 233.879706][ T8526] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 233.996892][ T4267] XFS (loop2): Unmounting Filesystem [ 234.184456][ T4408] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 234.203966][ T8538] loop3: detected capacity change from 0 to 64 [ 234.232183][ T951] usb 8-1: USB disconnect, device number 12 [ 234.340354][ T8536] loop4: detected capacity change from 0 to 4096 [ 234.464739][ T8536] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 234.480930][ T8536] ntfs3: loop4: Failed to load $Extend. [ 234.518709][ T8544] random: crng reseeded on system resumption [ 234.531795][ T8536] ntfs3: loop4: ino=5, "/" directory corrupted [ 234.538027][ T8536] ntfs3: loop4: ino=5, "/" directory corrupted [ 234.746250][ T8549] loop2: detected capacity change from 0 to 512 [ 234.827173][ T8549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.912092][ T8549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.977377][ T8554] loop7: detected capacity change from 0 to 256 [ 234.981902][ T8549] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1505: invalid indirect mapped block 4294967295 (level 1) [ 235.068147][ T8549] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1505: invalid indirect mapped block 4294967295 (level 1) [ 235.130759][ T8549] EXT4-fs (loop2): 2 truncates cleaned up [ 235.139967][ T8549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 235.255690][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 235.390576][ T41] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.398323][ T6558] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 235.406091][ T951] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 235.562393][ T8554] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 235.575597][ T8554] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 235.600746][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 235.608650][ T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.619248][ T6558] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.633725][ T951] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 235.644218][ T41] usb 4-1: config 0 has no interfaces? [ 235.649847][ T6558] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.664013][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.679035][ T6558] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.689630][ T6558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.698163][ T41] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 235.708713][ T951] usb 5-1: config 0 descriptor?? [ 235.715927][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.728208][ T41] usb 4-1: Product: syz [ 235.735192][ T41] usb 4-1: Manufacturer: syz [ 235.744661][ T8543] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 235.762276][ T41] usb 4-1: SerialNumber: syz [ 235.798358][ T41] usb 4-1: config 0 descriptor?? [ 235.918745][ T8567] loop7: detected capacity change from 0 to 2048 [ 235.931017][ T8567] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.984195][ T8567] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 236.072459][ T6558] usb 6-1: USB disconnect, device number 13 [ 236.135553][ T951] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 236.148678][ T951] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 236.160539][ T951] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 236.169676][ T951] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 236.177481][ T951] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 236.188117][ T951] lenovo 0003:17EF:6047.0012: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 236.189519][ T6781] EXT4-fs (loop7): unmounting filesystem. [ 236.319268][ T8576] loop2: detected capacity change from 0 to 512 [ 236.335062][ T951] lenovo 0003:17EF:6047.0012: Failed to switch F7/9/11 mode: -71 [ 236.350850][ T951] lenovo 0003:17EF:6047.0012: Failed to switch middle button: -71 [ 236.369222][ T951] lenovo 0003:17EF:6047.0012: Fn-lock setting failed: -71 [ 236.399346][ T951] lenovo 0003:17EF:6047.0012: Sensitivity setting failed: -71 [ 236.424415][ T951] usb 5-1: USB disconnect, device number 13 [ 236.431921][ T125] usb 4-1: USB disconnect, device number 15 [ 236.453743][ T8576] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1521: bg 0: block 248: padding at end of block bitmap is not set [ 236.468942][ T8576] Quota error (device loop2): write_blk: dquota write failed [ 236.500379][ T8576] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 236.530950][ T8576] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.1521: Failed to acquire dquot type 1 [ 236.579733][ T8576] EXT4-fs (loop2): 1 truncate cleaned up [ 236.605810][ T8583] fido_id[8583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 236.618796][ T8576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 236.667292][ T8576] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.748911][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 236.934473][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1525'. [ 237.026494][ T8596] loop4: detected capacity change from 0 to 1024 [ 237.618796][ T8624] random: crng reseeded on system resumption [ 237.650509][ T4317] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 237.862706][ T4317] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.884465][ T4317] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.910103][ T4317] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.934556][ T8633] loop3: detected capacity change from 0 to 1024 [ 237.941425][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.967387][ T8616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 238.334757][ T4410] usb 3-1: USB disconnect, device number 12 [ 238.377183][ T8614] loop5: detected capacity change from 0 to 40427 [ 238.384872][ T8614] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 238.399341][ T8614] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 238.409445][ T8614] F2FS-fs (loop5): invalid crc value [ 238.455502][ T8614] F2FS-fs (loop5): Found nat_bits in checkpoint [ 238.514294][ T8614] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 238.521670][ T8614] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 238.750765][ T125] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 238.940526][ T125] usb 8-1: Using ep0 maxpacket: 16 [ 238.951809][ T125] usb 8-1: config 0 has no interfaces? [ 238.973106][ T125] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.004150][ T125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.026499][ T125] usb 8-1: Product: syz [ 239.070790][ T125] usb 8-1: Manufacturer: syz [ 239.075433][ T125] usb 8-1: SerialNumber: syz [ 239.095081][ T8657] loop5: detected capacity change from 0 to 2048 [ 239.128286][ T125] usb 8-1: config 0 descriptor?? [ 239.158736][ T8661] loop4: detected capacity change from 0 to 512 [ 239.191043][ T951] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 239.201564][ T8661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.214992][ T8661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.250021][ T8657] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 239.269499][ T8661] EXT4-fs (loop4): 1 truncate cleaned up [ 239.290785][ T951] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 239.300181][ T8669] loop2: detected capacity change from 0 to 1024 [ 239.328040][ T8661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 239.412773][ T4410] usb 8-1: USB disconnect, device number 13 [ 239.439714][ T11] hfsplus: b-tree write err: -5, ino 4 [ 239.778752][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 239.804050][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1562'. [ 239.860570][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1562'. [ 239.876603][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 240.303354][ T8702] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 240.323946][ T951] kernel write not supported for file task/720/attr/keycreate (pid: 951 comm: kworker/1:2) [ 240.460640][ T6558] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 240.637067][ T8715] loop3: detected capacity change from 0 to 512 [ 240.657270][ T8715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.668326][ T8715] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.673059][ T6558] usb 3-1: config 0 has no interfaces? [ 240.693812][ T8715] EXT4-fs (loop3): 1 truncate cleaned up [ 240.696569][ T6558] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 240.699565][ T8715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.709481][ T6558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.760585][ T6558] usb 3-1: Product: syz [ 240.764819][ T6558] usb 3-1: Manufacturer: syz [ 240.769429][ T6558] usb 3-1: SerialNumber: syz [ 240.792201][ T6558] usb 3-1: config 0 descriptor?? [ 240.879471][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 241.100194][ T4410] usb 3-1: USB disconnect, device number 13 [ 241.714777][ T8720] random: crng reseeded on system resumption [ 241.759660][ T8719] kernel profiling enabled (shift: 6) [ 242.020833][ T8666] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 242.339717][ T8743] loop3: detected capacity change from 0 to 512 [ 242.401133][ T8743] EXT4-fs: Ignoring removed nobh option [ 242.438570][ T8746] loop4: detected capacity change from 0 to 256 [ 242.442536][ T8747] loop7: detected capacity change from 0 to 512 [ 242.461533][ T8743] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 242.494959][ T8747] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 242.503133][ T8747] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 242.511218][ T8747] System zones: 0-1, 15-15, 18-18, 34-34 [ 242.518770][ T8747] EXT4-fs (loop7): orphan cleanup on readonly fs [ 242.525262][ T8747] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 242.550900][ T8743] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1602: invalid indirect mapped block 2683928664 (level 1) [ 242.556188][ T8746] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 242.580332][ T8747] EXT4-fs warning (device loop7): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 242.622926][ T8743] EXT4-fs (loop3): 1 truncate cleaned up [ 242.651259][ T8743] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 242.657337][ T8747] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 242.670545][ T41] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 242.680380][ T8747] EXT4-fs (loop7): 1 truncate cleaned up [ 242.687129][ T8747] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 242.690642][ T4410] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 242.803698][ T8747] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 242.829960][ T8747] fscrypt (loop7, inode 16): Error -61 getting encryption context [ 242.860664][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 242.867381][ T41] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.903399][ T41] usb 6-1: config 0 has no interface number 0 [ 242.910752][ T6781] EXT4-fs (loop7): unmounting filesystem. [ 242.917859][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 242.928759][ T41] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.929175][ T4410] usb 3-1: Using ep0 maxpacket: 16 [ 242.985239][ T41] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.994820][ T4410] usb 3-1: config 0 has no interfaces? [ 243.005669][ T41] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.033029][ T4410] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.060053][ T41] usb 6-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 243.066088][ T4410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.087387][ T4410] usb 3-1: Product: syz [ 243.092585][ T4410] usb 3-1: Manufacturer: syz [ 243.099271][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.120562][ T4410] usb 3-1: SerialNumber: syz [ 243.134515][ T4410] usb 3-1: config 0 descriptor?? [ 243.158834][ T41] usb 6-1: config 0 descriptor?? [ 243.409117][ T8771] netlink: 'syz.4.1603': attribute type 3 has an invalid length. [ 243.417367][ T8771] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1603'. [ 243.426878][ T125] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 243.596929][ T41] holtek_mouse 0003:04D9:A072.0013: item fetching failed at offset 0/4 [ 243.605631][ T41] holtek_mouse 0003:04D9:A072.0013: hid parse failed: -22 [ 243.612245][ T125] usb 4-1: config 0 has no interfaces? [ 243.613495][ T41] holtek_mouse: probe of 0003:04D9:A072.0013 failed with error -22 [ 243.620735][ T125] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 243.646519][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.654628][ T125] usb 4-1: Product: syz [ 243.658823][ T125] usb 4-1: Manufacturer: syz [ 243.663547][ T125] usb 4-1: SerialNumber: syz [ 243.669708][ T4410] usb 3-1: USB disconnect, device number 14 [ 243.675890][ T125] usb 4-1: config 0 descriptor?? [ 243.799226][ T951] usb 6-1: USB disconnect, device number 14 [ 243.963548][ T41] usb 4-1: USB disconnect, device number 16 [ 244.545331][ T4408] udevd[4408]: failed to send result of seq 16654 to main daemon: Connection refused [ 244.690604][ T41] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 244.859995][ T4317] kernel write not supported for file /input/mice (pid: 4317 comm: kworker/0:5) [ 244.890545][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 244.902103][ T41] usb 5-1: config 0 has no interfaces? [ 244.930243][ T41] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 244.951067][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.959129][ T41] usb 5-1: Product: syz [ 244.970681][ T125] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 244.987253][ T41] usb 5-1: Manufacturer: syz [ 245.005384][ T41] usb 5-1: SerialNumber: syz [ 245.015035][ T41] usb 5-1: config 0 descriptor?? [ 245.160679][ T125] usb 4-1: Using ep0 maxpacket: 16 [ 245.172727][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.214381][ T125] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 245.219984][ T8815] random: crng reseeded on system resumption [ 245.255096][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.301338][ T125] usb 4-1: config 0 descriptor?? [ 245.439745][ T8823] loop2: detected capacity change from 0 to 64 [ 245.547702][ T22] usb 5-1: USB disconnect, device number 14 [ 245.622762][ T8828] loop2: detected capacity change from 0 to 1024 [ 245.636264][ T8828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 245.662921][ T8832] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 245.669655][ T8828] EXT4-fs warning (device loop2): empty_inline_dir:1874: bad inline directory (dir #12) - no `..' [ 245.718199][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 245.729345][ T125] wacom 0003:056A:032C.0014: hidraw0: USB HID v0.05 Device [HID 056a:032c] on usb-dummy_hcd.3-1/input0 [ 245.732985][ T8834] loop7: detected capacity change from 0 to 512 [ 245.747612][ T8834] EXT4-fs: Ignoring removed nobh option [ 245.766257][ T8834] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 245.774783][ T8834] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1629: invalid indirect mapped block 2683928664 (level 1) [ 245.789637][ T8834] EXT4-fs (loop7): 1 truncate cleaned up [ 245.796226][ T8834] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 245.849464][ T6781] EXT4-fs (loop7): unmounting filesystem. [ 245.850545][ T41] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 245.875251][ T8837] netlink: 642 bytes leftover after parsing attributes in process `syz.2.1632'. [ 245.938807][ T951] usb 4-1: USB disconnect, device number 17 [ 246.008781][ T8843] loop2: detected capacity change from 0 to 128 [ 246.017716][ T8843] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 246.026578][ T8845] loop7: detected capacity change from 0 to 512 [ 246.037046][ T8843] hpfs: filesystem error: improperly stopped [ 246.043393][ T8843] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 246.044547][ T8845] EXT4-fs (loop7): 1 truncate cleaned up [ 246.051604][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 246.063182][ T8843] hpfs: You really don't want any checks? You are crazy... [ 246.065118][ T8845] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 246.081054][ T41] usb 6-1: config 0 has no interfaces? [ 246.090709][ T8843] hpfs: hpfs_map_sector(): read error [ 246.096176][ T8843] hpfs: code page support is disabled [ 246.104955][ T41] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 246.109915][ T8843] hpfs: hpfs_map_4sectors(): unaligned read [ 246.120211][ T8843] hpfs: hpfs_map_4sectors(): unaligned read [ 246.126350][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.132625][ T8843] hpfs: filesystem error: unable to find root dir [ 246.144798][ T41] usb 6-1: Product: syz [ 246.159425][ T41] usb 6-1: Manufacturer: syz [ 246.175293][ T41] usb 6-1: SerialNumber: syz [ 246.186981][ T41] usb 6-1: config 0 descriptor?? [ 246.212631][ T6781] EXT4-fs (loop7): unmounting filesystem. [ 246.299156][ T8852] loop2: detected capacity change from 0 to 64 [ 246.311319][ T8850] netlink: 'syz.7.1637': attribute type 7 has an invalid length. [ 246.319078][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1637'. [ 246.516224][ T951] usb 6-1: USB disconnect, device number 15 [ 246.606899][ T8848] loop4: detected capacity change from 0 to 32768 [ 246.654112][ T8848] JBD2: Ignoring recovery information on journal [ 246.696820][ T8862] loop7: detected capacity change from 0 to 4096 [ 246.704893][ T8862] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 246.728701][ T8848] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 246.765687][ T8866] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1645'. [ 246.799823][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 247.126537][ T8882] loop4: detected capacity change from 0 to 164 [ 247.155189][ T8882] isofs: Unable to find the ".." directory for NFS. [ 247.200541][ T951] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 247.202020][ T8888] team0: Device sit1 is of different type [ 247.283545][ T8891] random: crng reseeded on system resumption [ 247.390517][ T951] usb 3-1: Using ep0 maxpacket: 16 [ 247.400868][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.430498][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.470506][ T951] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 247.479634][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.480744][ T125] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 247.519586][ T951] usb 3-1: config 0 descriptor?? [ 247.700552][ T125] usb 8-1: Using ep0 maxpacket: 16 [ 247.709420][ T125] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.757604][ T125] usb 8-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 247.787602][ T125] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.817610][ T125] usb 8-1: config 0 descriptor?? [ 247.886156][ T8892] loop4: detected capacity change from 0 to 40427 [ 247.894350][ T8892] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 247.902754][ T8892] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 247.910042][ T8902] loop3: detected capacity change from 0 to 128 [ 247.920494][ T8902] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 247.932635][ T8902] hpfs: filesystem error: improperly stopped [ 247.938669][ T8902] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 247.949209][ T8902] hpfs: You really don't want any checks? You are crazy... [ 247.958002][ T8902] hpfs: hpfs_map_sector(): read error [ 247.964128][ T8902] hpfs: code page support is disabled [ 247.964658][ T951] hid (null): unknown global tag 0xd [ 247.971334][ T8902] hpfs: hpfs_map_4sectors(): unaligned read [ 247.983507][ T8892] F2FS-fs (loop4): Found nat_bits in checkpoint [ 247.984472][ T8902] hpfs: hpfs_map_4sectors(): unaligned read [ 247.995818][ T8902] hpfs: filesystem error: unable to find root dir [ 248.020572][ T41] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 248.086293][ T8892] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 248.093704][ T8892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 248.159926][ T951] usb 3-1: string descriptor 0 read error: -71 [ 248.197019][ T951] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 248.205958][ T951] letsketch: probe of 0003:6161:4D15.0015 failed with error -32 [ 248.215176][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 248.231290][ T41] usb 6-1: config 0 has no interfaces? [ 248.240034][ T41] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 248.252938][ T125] wacom 0003:056A:032C.0016: hidraw0: USB HID v0.05 Device [HID 056a:032c] on usb-dummy_hcd.7-1/input0 [ 248.268181][ T951] usb 3-1: USB disconnect, device number 15 [ 248.280508][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.307399][ T41] usb 6-1: Product: syz [ 248.320664][ T41] usb 6-1: Manufacturer: syz [ 248.325438][ T41] usb 6-1: SerialNumber: syz [ 248.336360][ T41] usb 6-1: config 0 descriptor?? [ 248.474882][ T125] usb 8-1: USB disconnect, device number 14 [ 248.617860][ T951] usb 6-1: USB disconnect, device number 16 [ 248.951762][ T8920] loop3: detected capacity change from 0 to 32768 [ 248.975999][ T8920] JBD2: Ignoring recovery information on journal [ 249.022250][ T8920] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 249.110726][ T951] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 249.169736][ T8940] tipc: Enabling of bearer rejected, failed to enable media [ 249.209348][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 249.312308][ T951] usb 5-1: config 0 has no interfaces? [ 249.321747][ T951] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 249.358763][ T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.386973][ T951] usb 5-1: Product: syz [ 249.400535][ T951] usb 5-1: Manufacturer: syz [ 249.411392][ T951] usb 5-1: SerialNumber: syz [ 249.432118][ T951] usb 5-1: config 0 descriptor?? [ 249.445610][ T8947] loop7: detected capacity change from 0 to 1024 [ 249.494303][ T8947] hfsplus: bad catalog entry type [ 249.574595][ T4358] hfsplus: b-tree write err: -5, ino 4 [ 249.612329][ T8955] loop3: detected capacity change from 0 to 256 [ 249.629746][ T8955] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.650557][ T8955] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 249.690566][ T8955] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 249.844246][ T41] usb 5-1: USB disconnect, device number 15 [ 249.911012][ T951] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 249.977664][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1691'. [ 250.105234][ T951] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.128759][ T951] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 250.150302][ T951] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 250.159828][ T951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.168074][ T22] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 250.177926][ T951] usb 8-1: config 0 descriptor?? [ 250.185191][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 250.200516][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 250.218112][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 250.236900][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 250.246820][ T951] usb 8-1: media controller created [ 250.264411][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.282453][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 250.293229][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 250.312694][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input27 [ 250.337773][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 250.350769][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 250.360804][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 250.390503][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 250.399621][ T22] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 250.427542][ T951] usb 8-1: USB disconnect, device number 15 [ 250.433708][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.437609][ T8984] loop2: detected capacity change from 0 to 256 [ 250.459370][ T8984] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.460878][ T22] usb 4-1: config 0 descriptor?? [ 250.472135][ T8984] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 250.527667][ T8984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 250.529187][ T951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 250.906970][ T22] uclogic 0003:28BD:0055.0017: interface is invalid, ignoring [ 251.071990][ T8991] loop4: detected capacity change from 0 to 32768 [ 251.096319][ T9001] ALSA: mixer_oss: invalid OSS volume '' [ 251.109926][ T22] usb 4-1: USB disconnect, device number 18 [ 251.514679][ T8997] loop2: detected capacity change from 0 to 40427 [ 251.555648][ T8997] F2FS-fs (loop2): Found nat_bits in checkpoint [ 251.658277][ T8997] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 251.747437][ T9005] loop7: detected capacity change from 0 to 32768 [ 251.756136][ T4267] syz-executor: attempt to access beyond end of device [ 251.756136][ T4267] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.789077][ T9005] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 251.830513][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 252.032842][ T22] usb 5-1: config 0 has no interfaces? [ 252.041172][ T22] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 252.070476][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.096085][ T22] usb 5-1: Product: syz [ 252.373921][ T22] usb 5-1: Manufacturer: syz [ 252.467952][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 252.488182][ T22] usb 5-1: SerialNumber: syz [ 252.494465][ T22] usb 5-1: config 0 descriptor?? [ 252.681639][ T9019] loop3: detected capacity change from 0 to 32768 [ 252.688848][ T9019] XFS: ikeep mount option is deprecated. [ 252.698337][ T4317] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 252.746862][ T9019] XFS (loop3): Mounting V5 Filesystem [ 252.818457][ T9019] XFS (loop3): Ending clean mount [ 252.908047][ T4317] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.931116][ T951] usb 5-1: USB disconnect, device number 16 [ 252.947938][ T4317] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.968058][ T4317] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 252.994778][ T4317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.010494][ T4275] XFS (loop3): Unmounting Filesystem [ 253.037572][ T4317] usb 8-1: config 0 descriptor?? [ 253.461374][ T4317] hid-steam 0003:28DE:1142.0018: unknown main item tag 0xe [ 253.478673][ T9048] loop3: detected capacity change from 0 to 256 [ 253.488290][ T4317] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 253.573528][ T9048] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 253.577101][ T9036] loop2: detected capacity change from 0 to 32768 [ 253.599613][ T9036] gfs2: fsid=gfs2: Trying to join cluster "lock_dlm", "gfs2" [ 253.608138][ T9036] gfs2: fsid=gfs2: no fsname found [ 253.646099][ T9050] Bluetooth: MGMT ver 1.22 [ 253.669195][ T4317] usb 8-1: USB disconnect, device number 16 [ 254.090630][ T951] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 254.189798][ T4317] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 254.255236][ T9069] loop2: detected capacity change from 0 to 32768 [ 254.269191][ T9069] XFS (loop2): Mounting V5 Filesystem [ 254.286996][ T951] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 254.307347][ T951] usb 5-1: config 0 has no interface number 0 [ 254.313828][ T951] usb 5-1: config 0 interface 113 has no altsetting 0 [ 254.318503][ T9069] XFS (loop2): Ending clean mount [ 254.344273][ T9069] XFS (loop2): Quotacheck needed: Please wait. [ 254.352348][ T951] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 254.380484][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 254.383398][ T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.387113][ T4317] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.401926][ T951] usb 5-1: Product: syz [ 254.401943][ T951] usb 5-1: Manufacturer: syz [ 254.401958][ T951] usb 5-1: SerialNumber: syz [ 254.403500][ T951] usb 5-1: config 0 descriptor?? [ 254.415124][ T4317] usb 4-1: config 0 has no interface number 0 [ 254.429203][ T4317] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 254.438496][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.446791][ T4317] usb 4-1: Product: syz [ 254.451776][ T4317] usb 4-1: Manufacturer: syz [ 254.456382][ T4317] usb 4-1: SerialNumber: syz [ 254.467850][ T4317] usb 4-1: config 0 descriptor?? [ 254.493593][ T4317] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 254.499186][ T9069] XFS (loop2): Quotacheck: Done. [ 254.503827][ T4317] usb 4-1: selecting invalid altsetting 1 [ 254.513462][ T4317] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 254.522291][ T4317] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 254.532818][ T4317] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 254.541142][ T4317] usb 4-1: media controller created [ 254.558636][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.598603][ T4267] XFS (loop2): Unmounting Filesystem [ 254.642522][ C1] usb 5-1: NFC: Urb failure (status -71) [ 254.650780][ C1] usb 5-1: NFC: Urb failure (status -71) [ 254.675320][ T951] usb 5-1: NFC: Unable to get FW version [ 254.682303][ T951] pn533_usb: probe of 5-1:0.113 failed with error -71 [ 254.708499][ T951] usb 5-1: USB disconnect, device number 17 [ 254.850794][ T9084] device dummy0 entered promiscuous mode [ 254.857250][ T9084] device macsec1 entered promiscuous mode [ 254.865542][ T9084] device dummy0 left promiscuous mode [ 255.176186][ T9086] loop2: detected capacity change from 0 to 32768 [ 255.192257][ T9086] JBD2: Ignoring recovery information on journal [ 255.232188][ T9086] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 255.294972][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 255.465377][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.472567][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.629793][ T9100] loop2: detected capacity change from 0 to 1024 [ 255.637063][ T4317] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 255.646859][ T4317] zl10353_read_register: readreg error (reg=127, ret==-110) [ 255.670909][ T9060] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 255.696188][ T11] hfsplus: b-tree write err: -5, ino 4 [ 255.723601][ T4317] usb 4-1: USB disconnect, device number 19 [ 256.019863][ T9116] loop4: detected capacity change from 0 to 64 [ 256.260201][ T9125] loop4: detected capacity change from 0 to 2048 [ 256.302021][ T9125] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 256.365304][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 256.600243][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'. [ 256.990580][ T4317] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 257.183302][ T4317] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 257.200891][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.241014][ T4317] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 257.250094][ T4317] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 257.267342][ T4317] usb 4-1: Manufacturer: syz [ 257.289724][ T4317] usb 4-1: config 0 descriptor?? [ 257.470703][ T4317] rc_core: IR keymap rc-hauppauge not found [ 257.477219][ T4317] Registered IR keymap rc-empty [ 257.492069][ T4317] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 257.511673][ T4317] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 257.790816][ C0] igorplugusb 4-1:0.0: receive overflow, at least 8 lost [ 257.999188][ T4317] usb 4-1: USB disconnect, device number 20 [ 258.077512][ T9190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1785'. [ 258.143518][ T9175] loop4: detected capacity change from 0 to 32768 [ 258.184366][ T9175] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 258.250622][ T9198] syz.7.1787[9198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.250756][ T9198] syz.7.1787[9198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.271982][ T4268] (syz-executor,4268,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 258.319692][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 258.355245][ T9200] loop7: detected capacity change from 0 to 256 [ 258.363384][ T9196] loop2: detected capacity change from 0 to 8192 [ 258.371132][ T9200] exfat: Deprecated parameter 'utf8' [ 258.378542][ T9196] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 258.393557][ T9196] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 258.407661][ T9200] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 258.421413][ T9196] REISERFS (device loop2): using ordered data mode [ 258.429928][ T9196] reiserfs: using flush barriers [ 258.450187][ T9196] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 258.467334][ T9196] REISERFS (device loop2): checking transaction log (loop2) [ 258.492143][ T9196] REISERFS (device loop2): Using r5 hash to sort names [ 258.500158][ T9196] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 258.528270][ T9196] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 258.587440][ T9205] loop3: detected capacity change from 0 to 512 [ 258.628722][ T9205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 258.640724][ T9205] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.667017][ T27] INFO: task syz-executor:4266 blocked for more than 143 seconds. [ 258.675408][ T27] Not tainted syzkaller #0 [ 258.693529][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.703256][ T27] task:syz-executor state:D stack:22376 pid:4266 ppid:1 flags:0x00004004 [ 258.716970][ T27] Call Trace: [ 258.720346][ T27] [ 258.723417][ T27] __schedule+0x10ec/0x40b0 [ 258.728037][ T27] ? __sched_text_start+0x8/0x8 [ 258.733013][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.739094][ T27] ? lock_chain_count+0x20/0x20 [ 258.744379][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 258.749545][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 258.755029][ T27] schedule+0xb9/0x180 [ 258.759179][ T27] io_schedule+0x7c/0xd0 [ 258.763584][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 258.768974][ T27] ? folio_wait_bit+0x30/0x30 [ 258.773852][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 258.780180][ T27] ? __lock_acquire+0x7c50/0x7c50 [ 258.785827][ T27] ? __filemap_get_folio+0xf0/0xdd0 [ 258.791343][ T27] __filemap_get_folio+0x406/0xdd0 [ 258.796608][ T27] ? __filemap_get_folio+0xf0/0xdd0 [ 258.803053][ T27] ? page_cache_prev_miss+0x350/0x350 [ 258.808595][ T27] ? mlock_page_drain_local+0x75/0x490 [ 258.814836][ T27] ? mlock_page_drain_local+0x289/0x490 [ 258.823893][ T27] truncate_inode_pages_range+0x3a6/0xff0 [ 258.833037][ T27] ? mapping_evict_folio+0x520/0x520 [ 258.842865][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.859648][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 258.865155][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 258.870674][ T27] evict+0x498/0x870 [ 258.874661][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 258.879580][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 258.885280][ T27] ? _raw_spin_unlock+0x24/0x40 [ 258.890254][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 258.895923][ T27] evict_inodes+0x604/0x690 [ 258.902081][ T27] ? clear_inode+0x150/0x150 [ 258.906713][ T27] ? dput+0x1c9/0x1d0 [ 258.911106][ T27] ? sync_filesystem+0x103/0x220 [ 258.916068][ T27] generic_shutdown_super+0x93/0x340 [ 258.921628][ T27] kill_block_super+0x7c/0xe0 [ 258.926318][ T27] deactivate_locked_super+0x93/0xf0 [ 258.931885][ T27] cleanup_mnt+0x463/0x4f0 [ 258.936317][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 258.941587][ T27] task_work_run+0x1ca/0x250 [ 258.946225][ T27] ? task_work_cancel+0x230/0x230 [ 258.951341][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 258.956823][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 258.962198][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 258.967763][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 258.973327][ T27] do_syscall_64+0x58/0xa0 [ 258.977755][ T27] ? clear_bhb_loop+0x60/0xb0 [ 258.982647][ T27] ? clear_bhb_loop+0x60/0xb0 [ 258.987335][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.993330][ T27] RIP: 0033:0x7f2492b8ff57 [ 258.997790][ T27] RSP: 002b:00007ffc8ee9ea68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 259.007980][ T27] RAX: 0000000000000000 RBX: 00007f2492c11c2d RCX: 00007f2492b8ff57 [ 259.016079][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8ee9eb20 [ 259.024133][ T27] RBP: 00007ffc8ee9eb20 R08: 0000000000000000 R09: 0000000000000000 [ 259.032853][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8ee9fbb0 [ 259.040959][ T27] R13: 00007f2492c11c2d R14: 000000000001b0ab R15: 00007ffc8ee9fbf0 [ 259.048955][ T27] [ 259.054341][ T27] INFO: task syz.1.443:5625 blocked for more than 143 seconds. [ 259.062210][ T27] Not tainted syzkaller #0 [ 259.067213][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.079074][ T27] task:syz.1.443 state:D stack:25504 pid:5625 ppid:4269 flags:0x00004004 [ 259.088520][ T27] Call Trace: [ 259.091894][ T27] [ 259.094842][ T27] __schedule+0x10ec/0x40b0 [ 259.099374][ T27] ? __sched_text_start+0x8/0x8 [ 259.104391][ T27] ? lock_chain_count+0x20/0x20 [ 259.110110][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 259.115217][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 259.120713][ T27] ? rwsem_down_read_slowpath+0x50a/0x840 [ 259.126439][ T27] schedule+0xb9/0x180 [ 259.130770][ T27] schedule_preempt_disabled+0xf/0x20 [ 259.136152][ T27] rwsem_down_read_slowpath+0x4f4/0x840 [ 259.141831][ T27] ? down_write_killable_nested+0x90/0x90 [ 259.147568][ T27] ? read_lock_is_recursive+0x10/0x10 [ 259.153006][ T27] ? __rwlock_init+0x140/0x140 [ 259.157779][ T27] ? ksys_sync+0x150/0x150 [ 259.162267][ T27] down_read+0x94/0x2d0 [ 259.166438][ T27] ? ksys_sync+0x150/0x150 [ 259.171003][ T27] iterate_supers+0xa4/0x1d0 [ 259.175600][ T27] ksys_sync+0x91/0x150 [ 259.179746][ T27] ? sync_filesystem+0x220/0x220 [ 259.184727][ T27] ? syscall_enter_from_user_mode+0x21/0x80 [ 259.190690][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 259.195918][ T27] __ia32_sys_sync+0xa/0x10 [ 259.200479][ T27] do_syscall_64+0x4c/0xa0 [ 259.204913][ T27] ? clear_bhb_loop+0x60/0xb0 [ 259.210076][ T27] ? clear_bhb_loop+0x60/0xb0 [ 259.214837][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.220819][ T27] RIP: 0033:0x7f873a58ec29 [ 259.225249][ T27] RSP: 002b:00007f873b3d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 259.233894][ T27] RAX: ffffffffffffffda RBX: 00007f873a7d5fa0 RCX: 00007f873a58ec29 [ 259.241934][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.249912][ T27] RBP: 00007f873a7d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 259.257930][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.266016][ T27] R13: 00007f873a7d6038 R14: 00007f873a7d5fa0 R15: 00007fffc4aa4b38 [ 259.274093][ T27] [ 259.277220][ T27] [ 259.277220][ T27] Showing all locks held in the system: [ 259.280337][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 259.285965][ T27] 1 lock held by rcu_tasks_kthre/12: [ 259.296300][ T27] #0: ffffffff8cb2b570 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 259.307318][ T27] 1 lock held by rcu_tasks_trace/13: [ 259.313665][ T27] #0: ffffffff8cb2bd90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 259.324951][ T27] 1 lock held by khungtaskd/27: [ 259.329874][ T27] #0: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 259.340226][ T27] 2 locks held by getty/4034: [ 259.345421][ T27] #0: ffff88814cf6e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 259.355791][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 259.366688][ T27] 1 lock held by syz-executor/4266: [ 259.373621][ T27] #0: ffff88807c44a0e0 (&type->s_umount_key#112){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 259.397377][ T27] 1 lock held by syz-executor/4275: [ 259.402907][ T27] #0: ffff8880484e60e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 259.414217][ T27] 2 locks held by kworker/0:5/4317: [ 259.419454][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 259.429891][ T27] #1: ffffc90004077d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 259.441404][ T27] 3 locks held by kworker/0:18/4502: [ 259.446694][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 259.457260][ T27] #1: ffffc90004b4fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 259.469844][ T27] #2: ffffffff8cb308b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 259.480783][ T27] 1 lock held by syz.1.443/5625: [ 259.485724][ T27] #0: ffff88807c44a0e0 (&type->s_umount_key#112){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 259.496111][ T27] [ 259.498448][ T27] ============================================= [ 259.498448][ T27] [ 259.507162][ T27] NMI backtrace for cpu 0 [ 259.511515][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 259.518699][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.528745][ T27] Call Trace: [ 259.532025][ T27] [ 259.534955][ T27] dump_stack_lvl+0x168/0x22e [ 259.539631][ T27] ? irq_work_queue+0xb8/0x140 [ 259.544394][ T27] ? show_regs_print_info+0x12/0x12 [ 259.549584][ T27] ? load_image+0x3b0/0x3b0 [ 259.554084][ T27] ? vprintk_emit+0x571/0x680 [ 259.558762][ T27] ? printk_sprint+0x460/0x460 [ 259.563527][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 259.568461][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 259.574604][ T27] ? _printk+0xcc/0x110 [ 259.578752][ T27] ? load_image+0x3b0/0x3b0 [ 259.583251][ T27] ? load_image+0x3b0/0x3b0 [ 259.587753][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 259.593812][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 259.599782][ T27] watchdog+0xeee/0xf30 [ 259.606782][ T27] ? watchdog+0x1ed/0xf30 [ 259.611855][ T27] kthread+0x29d/0x330 [ 259.615927][ T27] ? hungtask_pm_notify+0x40/0x40 [ 259.620956][ T27] ? kthread_blkcg+0xd0/0xd0 [ 259.625549][ T27] ret_from_fork+0x1f/0x30 [ 259.629974][ T27] [ 259.633946][ T27] Sending NMI from CPU 0 to CPUs 1: [ 259.639192][ C1] NMI backtrace for cpu 1 [ 259.639202][ C1] CPU: 1 PID: 4347 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 259.639216][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.639224][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 259.639248][ C1] RIP: 0010:__lock_acquire+0xdd8/0x7c50 [ 259.639268][ C1] Code: 89 d8 48 c1 e8 06 48 8d 3c c5 40 22 ae 90 be 08 00 00 00 e8 ca ec 6d 00 49 b8 00 00 00 00 00 fc ff df 48 0f a3 1d 38 1d 4b 0f <0f> 83 da 4c 00 00 c7 44 24 34 00 00 00 00 4d 89 e7 49 8d 9c 24 d0 [ 259.639280][ C1] RSP: 0018:ffffc900042674a0 EFLAGS: 00000057 [ 259.639292][ C1] RAX: 0000000000000001 RBX: 000000000000004a RCX: ffffffff816304f6 [ 259.639302][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90ae2248 [ 259.639311][ C1] RBP: ffffc900042676f0 R08: dffffc0000000000 R09: fffffbfff215c44a [ 259.639321][ C1] R10: fffffbfff215c44a R11: 1ffffffff215c449 R12: ffff88807c209dc0 [ 259.639331][ C1] R13: 0000000000000002 R14: ffff88807c20a940 R15: ffff88807c20a960 [ 259.639341][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 259.639353][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.639367][ C1] CR2: 00007fc2b37a12f8 CR3: 000000007e6cf000 CR4: 00000000003506e0 [ 259.639380][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.639388][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.639397][ C1] Call Trace: [ 259.639402][ C1] [ 259.639407][ C1] ? deref_stack_reg+0x19f/0x230 [ 259.639427][ C1] ? deref_stack_reg+0x19f/0x230 [ 259.639448][ C1] ? verify_lock_unused+0x140/0x140 [ 259.639466][ C1] ? chacha_permute+0x4e4/0xef0 [ 259.639492][ C1] lock_acquire+0x1b4/0x490 [ 259.639512][ C1] ? crng_make_state+0x1ad/0xa90 [ 259.639529][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 259.639545][ C1] ? read_lock_is_recursive+0x10/0x10 [ 259.639561][ C1] ? lock_chain_count+0x20/0x20 [ 259.639579][ C1] crng_make_state+0x1ca/0xa90 [ 259.639593][ C1] ? crng_make_state+0x1ad/0xa90 [ 259.639608][ C1] ? crng_make_state+0x1ad/0xa90 [ 259.639622][ C1] ? urandom_read_iter+0x140/0x140 [ 259.639646][ C1] _get_random_bytes+0xd2/0x210 [ 259.639660][ C1] ? get_random_bytes+0x20/0x20 [ 259.639676][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 259.639695][ C1] ? memset+0x1e/0x40 [ 259.639713][ C1] ? __alloc_skb+0x4f3/0x7e0 [ 259.639728][ C1] ? skb_put+0x117/0x210 [ 259.639744][ C1] nsim_dev_trap_report_work+0x364/0xaf0 [ 259.639768][ C1] ? process_one_work+0x7a1/0x1160 [ 259.639781][ C1] process_one_work+0x898/0x1160 [ 259.639800][ C1] ? worker_detach_from_pool+0x240/0x240 [ 259.639815][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 259.639833][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 259.639851][ C1] ? kthread_data+0x4b/0xc0 [ 259.639869][ C1] worker_thread+0xaa2/0x1250 [ 259.639892][ C1] kthread+0x29d/0x330 [ 259.639908][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 259.639921][ C1] ? kthread_blkcg+0xd0/0xd0 [ 259.639939][ C1] ret_from_fork+0x1f/0x30 [ 259.639961][ C1] [ 259.649663][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 259.649675][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 259.649691][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.649700][ T27] Call Trace: [ 259.649706][ T27] [ 259.649713][ T27] dump_stack_lvl+0x168/0x22e [ 259.649734][ T27] ? memcpy+0x3c/0x60 [ 259.649757][ T27] ? show_regs_print_info+0x12/0x12 [ 259.649775][ T27] ? load_image+0x3b0/0x3b0 [ 259.649807][ T27] panic+0x2c9/0x710 [ 259.649826][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 259.649847][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 259.649866][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 259.649892][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 259.649912][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 259.649934][ T27] watchdog+0xf2d/0xf30 [ 259.649955][ T27] ? watchdog+0x1ed/0xf30 [ 259.649976][ T27] kthread+0x29d/0x330 [ 259.650002][ T27] ? hungtask_pm_notify+0x40/0x40 [ 259.650019][ T27] ? kthread_blkcg+0xd0/0xd0 [ 259.650041][ T27] ret_from_fork+0x1f/0x30 [ 259.650072][ T27] [ 259.652554][ T27] Kernel Offset: disabled [ 260.053732][ T27] Rebooting in 86400 seconds..